Re: [Openvpn-devel] [PATCH release/2.3] docs: Further improve --reneg-bytes and SWEET32 information

2016-12-21 Thread Steffan Karger
Hi, On 21 December 2016 at 21:54, David Sommerseth wrote: > +If using ciphers with cipher block sizes less than 128-bits, > \-\-reneg\-bytes is > +set to 64MB by default, unless it is explicitly disabled by setting the > value to > +0,but this is (As in the patch for

[Openvpn-devel] [PATCH release/2.3] docs: Further improve --reneg-bytes and SWEET32 information

2016-12-21 Thread David Sommerseth
There are still some support tickets related to SWEET32 and our defult enforced --reneg-bytes 64 when using weaker ciphers (less than 128-bits cipher blocks). Try to clarify this even more. Also fix a few mistakes, saying less than 128-bits and not 128-bits and less. Signed-off-by: David