4月19日的KPNTunnel Revolution (Official应用程序分析

What the "Revolution" project/series/edition of KPNTunnel ??? > Continuously project with more experiment and new fresh lightweight style project for KPN Tunnel (Official). > Pure write from zero for better performance core and better lightweight style. > First App tunneling through built-in SSH Tunnel over SSL/TLS Connection. (why ? . i know SSH Tunneling is secure, but we feel it's not enough so we added more secure method with SSL/TLS connection). You can see how to use SSH Tunnel over SSL/TLS in "About" of this App. * Features: + Direct Proxy. (Tunneling through SSH Tunnel Directly to SSH Server). + Direct SSL/TLS. (Tunneling through SSH Tunnel Directly to SSH Server over SSL/TLS Connection). + HTTP Proxy .(Tunneling through SSH Tunnel over HTTP Proxy) + SSL/TLS Proxy. (Tunneling through SSH Tunnel over SSL/TLS Proxy). + SSL/TLS Proxy > HTTP Proxy. (Tunneling through SSH Tunnel with TLS/SSL over HTTP Proxy). + many more... Bugs/Issue ? - Android 4.0 Only support TLSv1 and SSLv3 only (Android System), so your TLS/SSL server must be used/enabled TLSv1 and SSLv3. - Android 4.1-4.2 TLSv1.1 and TLSv1.2 not enabled by System Default like Android 5.0+, so we add force enabling TLSv1.1 and TLSv1.2 for more secure update. - If found other issue(s)/bug(s), please contact me. :) * Need Rooted Device ? > Some features is needed like: + VPN Tether (bypass all Hotspot Tether through Vpn Interface). + and soon we add more features. * SSH+SSL Server Requiment: + If use TLS/SSL mode you must be install and setup the stunnel4 library. you can get the original stunnel4 library in http://stunnel.org. + You can search "how to setup/install stunnel4" in search engine like google, yahoo, bing, etc for your OS used by your Virtual Private Server (VPS). + In Proxy Type Mode "Direct TLS/SSL" & " TLS/SSL Proxy > HTTP Proxy" please setup stunnel to connect with ssh (dropbear/openssh) server port. + In Proxy Type Mode "TLS/SSL Proxy" please setup stunnel to connect with squid port. + We Recommended to enable all TLS and SSL protocol version for keep support with android 4.0 until newer, why ? See issue/bugs on above. * TLS/SSL Client Side (KPNTunnel Revolution App): + We use method of TLS/SSL Socket using TrustAll Cert (X509 Certificate), so you don't need a client key & cert from SSL Server. I know this method is less secure, so in other version of update we can add support client key & cert for get better secure connection. :)