Re: [Openvpn-users] question about "WARNING: this cipher's block size is less than 128 bit"

2016-12-22 Thread Selva Nair
Hi, Thanks for the details. On Thu, Dec 22, 2016 at 11:40 AM, Gert Doering wrote: > We do not use challenge (static or dynamic) today, as we did not know > that these exist when building the system - so the user enters > his "token + PIN" as one string into the "Password:"

Re: [Openvpn-users] question about "WARNING: this cipher's block size is less than 128 bit"

2016-12-22 Thread Gert Doering
Hi, On Thu, Dec 22, 2016 at 11:26:14AM -0500, Selva Nair wrote: > On Sat, Dec 17, 2016 at 5:13 AM, Gert Doering wrote: > > > (Main reason we can't stick to BF-CBC is that we use OTP passwords and > > with "reneg-bytes 64M" it's asking way too often for user+password...) >

Re: [Openvpn-users] question about "WARNING: this cipher's block size is less than 128 bit"

2016-12-22 Thread Selva Nair
Hi, On Sat, Dec 17, 2016 at 5:13 AM, Gert Doering wrote: > (Main reason we can't stick to BF-CBC is that we use OTP passwords and > with "reneg-bytes 64M" it's asking way too often for user+password...) > If I may ask, assuming you use username/password + OTP, how do you