Am 23.06.20 um 06:16 schrieb Dmitry Melekhov: > 22.06.2020 20:58, Selva Nair пишет: >> +*WARNING* This MAY break configurations where the client uses >> + ``--disable-occ`` feature where the ``--cipher`` has >> + not been explicitly configured on both client and >> + server side. It is recommended to remove the >> ``--disable-occ`` >> + option*or* explicitly add ``--cipher AES-256-GCM`` >> on the >> + client side if ``--disable-occ`` is strictly needed. > > Well, may be it is possible to add support for setting cipher in ccd > > as it was possible before 2.4.9 using patch from here > > https://community.openvpn.net/openvpn/ticket/845 >
I get that this might have been needed in 2.4.x with the first version of NCP. But the NCP negoiation in 2.5.x should handle all use cases. Help me understand why --cipher in ccd should be needed? Arne
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
