Hi, On Mon, Jul 25, 2016 at 1:46 AM, Yevgeny Kosarzhevsky <[email protected]> wrote: > whenever I enable 'tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384' on > client and server I get the following error: > > TLS_ERROR: BIO read tls_read_plaintext error: error:1408A0C1:SSL > routines:SSL3_GET_CLIENT_HELLO:no shared cipher > > Is there something I missed? > I have also 'tls-min-version 1.2' on both sides.
This is likely due to the ECDHE part - this is not supported for OpenVPN 2.3 with OpenSSL (it is for PolarSSL). Use DHE instead, or switch to the OpenVPN master branch. The master branch does have ECDH(E) support for OpenSSL too. -Steffan ------------------------------------------------------------------------------ What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic patterns at an interface-level. Reveals which users, apps, and protocols are consuming the most bandwidth. Provides multi-vendor support for NetFlow, J-Flow, sFlow and other flows. Make informed decisions using capacity planning reports.http://sdm.link/zohodev2dev _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
