> True, but this "config mismatch warning" stuff should actually
> be checked before GCM is negotiated, so there *should* not be a
> mismatch if both sides have it in their config.

Yes, it's ugly. The current windows GUI 11 is coloring the message
red, personally I'd color warnings YELLOW and errors RED.
> 
> We should not log annoying warnings unless there is something
> actionable for the users ("stop using BF-CBC"), so this is something
> we should look into fixing.

Currently, I'm encountering two/three real warnings:

AUTH used inconsistently (we talked about this)
link-mtu used inconsistenly (dunno what to do about this)
WARNING: 'cipher' is used inconsistently, but I have a more recent config for 
that.

Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netzwerk

Campus Benjamin Franklin (CBF)
Haus I | 1. OG | Raum 105
Hindenburgdamm 30 | D-12203 Berlin

Tel. +49 30 450 570 155
ralf.hildebra...@charite.de
https://www.charite.de


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to