Hi All,
I built openvpn 2.4.3-1 on server using patch also to allow for per client
cipher through ccd file.
I took the patch from https://community.openvpn.net/openvpn/ticket/845.
I have put at client ccd file "cipher none"
and at client config file "cipher none".
When connecting with client with openvpn 2.2.1-8 (the default on Debian7)
seems that cipher is disabled on this client, while other clients can still
use encryption.
I get the following at server logs:
******* WARNING *******: '--cipher none' was specified. This means NO
encryption will be performed and tunnelled data WILL be transmitted in
clear text over the network! PLEASE DO RECONSIDER THIS SETTING!
Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC
authentication
which seems all ok.
When connecting with clients having the same openvpn version as the server
(2.4.3-1) and using the same configs, it seems that the server ignores the
"cipher none" at ccd file and logs the following:
'PUSH_REPLY,route-gateway 169.251.0.1,topology subnet,ping 120,ping-restart
600,redirect-gateway def1 bypass-dhcp,cipher none,ifconfig 169.251.0.49
255.255.0.0,peer-id 0,cipher AES-256-GCM' (status=1)
Fri Sep 15 14:51:50 2017 SmartBox-VM/172.30.0.180:57095 Data Channel: using
negotiated cipher 'AES-256-GCM'
Fri Sep 15 14:51:50 2017 SmartBox-VM/172.30.0.180:57095 Data Channel
Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Fri Sep 15 14:51:50 2017 SmartBox-VM/172.30.0.180:57095 Data Channel
Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
I have tried also to have:
cipher none
push "cipher none"
with same results.
Is there something that is causing this behavior?
Thanx,
Alex
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
