On 22-03-17 16:14, Joaquin Henriquez wrote: >>>From the wiki I read the following: >> Today, OpenVPN does not support TLS-ECDHE-* or more exotic cipher-suites as >> there is no elliptic curve support currently. >> >> https://community.openvpn.net/openvpn/wiki/Hardening >> >> Is this statement still true? >> >> Cause I try: >> tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384 > > >>From 2.4: > > Some of the major features are AEAD (GCM) cipher and Elliptic Curve DH key exchange support, > > So that answer my question.
Indeed. If both ends are 2.4+, ECDH and ECSDA should just work. The hardening page is somewhat outdated. I updated the section on --tls-cipher a bit, but the whole page could use some more love... -Steffan ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
