rigacci.org

User Tools

Site Tools

Trace:
doc:appunti:linux:sa:debian_upgrade_11_12

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
doc:appunti:linux:sa:debian_upgrade_11_12 [2025/06/24 11:52] – [Configuration with TLS] niccolodoc:appunti:linux:sa:debian_upgrade_11_12 [2025/06/24 11:53] (current) – [Configuration with TLS] niccolo
Line 147: Line 147:
 # The --cipher option should not be used any longer with OpenVPN 2.6 in TLS mode. # The --cipher option should not be used any longer with OpenVPN 2.6 in TLS mode.
 #cipher AES-256-CBC #cipher AES-256-CBC
-# Use --data-ciphers including AES-256-CBC to the default value +# Use --data-ciphers adding the AES-256-CBC to the default value, e.g. for OpenVPN 2.3 clients. 
-# e.g. for clients using OpenVPN 2.3. +data-ciphers AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305:AES-256-CBC
-data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC+
 # Use --data-ciphers-fallback for peers that are old or have negotiation disabled, # Use --data-ciphers-fallback for peers that are old or have negotiation disabled,
 # e.g. peers running OpenVPN 2.3 or older, or some embedded devices. # e.g. peers running OpenVPN 2.3 or older, or some embedded devices.
doc/appunti/linux/sa/debian_upgrade_11_12.1750758749.txt.gz · Last modified: by niccolo