Hi,
On 04/02/2022 20:12, Arne Schwabe wrote:
A 2.4 client with ncp-disable should work nicely as well. We just do not
make ourselves compatible with 2.4.0 with ncp-disable if you select
2.4.0, you need 2.3.0 for that.
Thanks for the hint!
Went the lazy route and tested against 2.4.11 with --ncp-disable.
Server: 2.4.11 with --ncp-disable (to mimic 2.3.x) and no --cipher
specified (BF-CBC is therefore the default).
Client: master + this patch and no --cipher specified.
* First attempt: wrong cipher negotiated and connection breaks.
* Second attempt: add --compat-mode 2.3.0 to client (to exercise the
code implemented by this patch) and I could happily connect to the
2.3.x-like server using BF-CBC.
Acked-by: Antonio Quartulli <a...@unstable.cc>
--
Antonio Quartulli
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
