Changes between Version 23 and Version 24 of CipherNegotiation


Ignore:
Timestamp:
08/11/20 21:38:57 (4 years ago)
Author:
tct
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • CipherNegotiation

    v23 v24  
    88
    99== Effective directives
    10 `--data-ciphers ALG:ALG` - Data channel ciphers. Default `ALG` AES-256-GCM:AES-128-GCM [[br]]
    11 `--data-cipher-fallback ALG` - Fallback data channel cipher.[[br]]
    12 `--cipher ALG` - Data channel cipher. To be deprecated.[[br]]
     102.5: `--data-ciphers ALG:ALG` - Data channel ciphers. Default `ALG` AES-256-GCM:AES-128-GCM [[br]]
     112.5: `--data-cipher-fallback ALG` - Fallback data channel cipher.[[br]]
     12All: `--cipher ALG` - Data channel cipher. **Will be deprecated**.[[br]]
    1313  In OpenVPN 2.5 `--cipher` does not have a default `ALG`.[[br]]
    1414  In OpenVPN upto 2.4 the default `ALG` is BF-CBC.[[br]]
    15 `--ncp-disable` - Disable NCP - **Deprecated**.[[br]]
     152.4: `--ncp-disable` - Disable NCP - **Deprecated**.[[br]]
    1616
    1717== Common configurations
     
    129129
    130130==== Server version 2.4 Configuring: `--cipher`[[br]]
    131 ||  `--cipher`   ||=  `--ncp-ciphers`       =||  NCP  ||
    132 ||  AES-256-CBC  ||=  -                     =||  Yes  ||
     131||  `--cipher`   ||=  `--ncp-ciphers`  =||  NCP  ||
     132||  AES-256-CBC  ||=  -                =||  Yes  ||
    133133
    134134    * __Client version 2.5__
     
    146146    * __Client version 2.3__
    147147  ||  `--cipher`   ||  NCP  ||  Connection  ||
    148   ||  -            ||  No   ||  OK. BF-CBC  ||
     148  ||  -            ||  No   ||  Fail (no shared cipher)  ||
    149149  ||  AES-256-CBC  ||  No   ||  OK. AES-256-CBC  ||
    150   ||  BF-CBC       ||  No   ||  OK. BF-CBC  ||
    151 
    152     * __Client version 2.2__
    153   ||  `--cipher`   ||  NCP  ||  Connection  ||
    154   ||    -          ||  No   ||  OK. BF-CBC  ||
    155   ||  BF-CBC       ||  No   ||  OK. BF-CBC  ||
     150  ||  BF-CBC       ||  No   ||  Fail (no shared cipher)  ||
     151
     152    * __Client version 2.2__
     153  ||  `--cipher`   ||  NCP  ||  Connection  ||
     154  ||    -          ||  No   ||  Fail (no shared cipher)  ||
     155  ||  BF-CBC       ||  No   ||  Fail (no shared cipher)  ||
    156156----
    157157