diff options
Diffstat (limited to 'main/src/main/java/de/blinkt/openvpn/VpnProfile.java')
-rw-r--r-- | main/src/main/java/de/blinkt/openvpn/VpnProfile.java | 13 |
1 files changed, 12 insertions, 1 deletions
diff --git a/main/src/main/java/de/blinkt/openvpn/VpnProfile.java b/main/src/main/java/de/blinkt/openvpn/VpnProfile.java index 921ea4db..6806232b 100644 --- a/main/src/main/java/de/blinkt/openvpn/VpnProfile.java +++ b/main/src/main/java/de/blinkt/openvpn/VpnProfile.java @@ -60,7 +60,7 @@ public class VpnProfile implements Serializable, Cloneable { public static final String INLINE_TAG = "[[INLINE]]"; public static final String DISPLAYNAME_TAG = "[[NAME]]"; public static final int MAXLOGLEVEL = 4; - public static final int CURRENT_PROFILE_VERSION = 8; + public static final int CURRENT_PROFILE_VERSION = 9; public static final int DEFAULT_MSSFIX_SIZE = 1280; public static final int TYPE_CERTIFICATES = 0; public static final int TYPE_PKCS12 = 1; @@ -162,6 +162,7 @@ public class VpnProfile implements Serializable, Cloneable { // set members to default values private UUID mUuid; private int mProfileVersion; + public String mDataCiphers = ""; public boolean mBlockUnusedAddressFamilies =true; @@ -304,6 +305,11 @@ public class VpnProfile implements Serializable, Cloneable { case 7: if (mAllowAppVpnBypass) mBlockUnusedAddressFamilies = !mAllowAppVpnBypass; + case 8: + if (!TextUtils.isEmpty(mCipher) && !"BF-CBC".equals(mCipher)) + { + mDataCiphers = "AES-256-GCM:AES-128-GCM:" + mCipher; + } default: } @@ -612,6 +618,11 @@ public class VpnProfile implements Serializable, Cloneable { cfg.append("remote-cert-tls server\n"); } + if (!TextUtils.isEmpty(mDataCiphers)) + { + cfg.append("data-ciphers ").append(mDataCiphers).append("\n"); + } + if (!TextUtils.isEmpty(mCipher)) { cfg.append("cipher ").append(mCipher).append("\n"); } |