Re: [Openvpn-users] Correct use of ncp-ciphers/ncp-disable for the data channel cipher

2017-02-16 Thread David Sommerseth
On 16/02/17 18:58, Gert Doering wrote: > Hi, > > On Thu, Feb 16, 2017 at 02:44:13PM +0100, David Sommerseth wrote: >> A v2.4 (and newer) client which adds --ncp-ciphers can steer which >> ciphers a NCP capable server will use. So if the server uses >> --ncp-ciphers

Re: [Openvpn-users] Correct use of ncp-ciphers/ncp-disable for the data channel cipher

2017-02-16 Thread Gert Doering
Hi, On Thu, Feb 16, 2017 at 02:44:13PM +0100, David Sommerseth wrote: > A v2.4 (and newer) client which adds --ncp-ciphers can steer which > ciphers a NCP capable server will use. So if the server uses > --ncp-ciphers AES-256-GCM:AES-256-CBC:AES-128-GCM:AES-128-CBC and you > want your client to

Re: [Openvpn-users] Correct use of ncp-ciphers/ncp-disable for the data channel cipher

2017-02-16 Thread David Sommerseth
On 16/02/17 13:45, saato...@keemail.me wrote: > I read about the new options --ncp-ciphers and --ncp-disable, which > allow a negotiable cipher for the data channel encryption. > > It's not clear to me how it's used. > > When I specify `---ncp-ciphers AES-256-GCM:AES-128-GCM`, then the cipher >

[Openvpn-users] Correct use of ncp-ciphers/ncp-disable for the data channel cipher

2017-02-16 Thread saatomic
I read about the new options --ncp-ciphers and --ncp-disable, which allow a negotiable cipher for the data channel encryption. It's not clear to me how it's used. When I specify `---ncp-ciphers AES-256-GCM:AES-128-GCM`, then the cipher will be one of th mentioned two, right? What happens to