Re: OpenVPN on port 443

On 24.01.24 13:31, Hans via Openvpn-users wrote:
> From: "Gert Doering" <[email protected]<mailto:[email protected]>>
> Date: Wednesday, 24 January 2024 at 13:03:30
>> On Wed, Jan 24, 2024 at 11:49:43AM +0000, Peter Davis via Openvpn-users wrote:
>>> How can I make OpenVPN look like an HTTPS connection?
>> 
>> You can't.  OpenVPN is not https, so even if you use tcp/443, on a close
>> enough look it will be clear "this is not HTTPS".
> 
> How about using stunnel instead?

stunnel may be able to wrap your (TCP) traffic into TLS, whose 
unencrypted parts may look more or less like the TLS interwoven into 
HTTPS, but it still won't make your hours-long single-server VPN 
connection with keepalives and key renegs in regular intervals and 
carrying an SSH login with its single-keystroke upstream packets look 
like you browsed a couple websites.

Also, don't forget to configure the VPN server with --port-share, in 
case one of the nation-level censors you're trying to fool gets the idea 
of looking at your "interesting website" himself ...

Kind regards,
-- 
Jochen Bern
Systemingenieur

Binect GmbH

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users