Changes between Version 48 and Version 49 of CipherNegotiation

Timestamp:

08/13/20 20:15:57 (4 years ago)

Author:

tct

Comment:

--

CipherNegotiation

@@ -313 +313 @@
 ----
 
-== Corner case: OpenVPN built with `--enable-small`
+== Special requirement: OpenVPN built with `--enable-small`
+When OpenVPN version 2.3 or older is built with `--enable-small` (Typically found in routers) then Openvpn 2.5+ **must** use `--data-ciphers-fallback ALG`. The `ALG` must match the peers `--cipher`.[[br]][[br]]
+**This is the only case where** `--data-ciphers-fallback` **takes effect.**
 === Server version 2.3 built with `--enable-small`
 ==== Default configuration: No effective directives specified.[[br]]
@@ -321 +323 @@
     * __Client version 2.5__
   ||=  `--data-ciphers`  =||=  `-fallback`  =||  NCP  ||  Connection  ||
-  ||=  -  =||=  -  =||  Partial  ||  `Fail (no shared cipher)`  ||
   ||=  -  =||=  -  =||  Partial  ||  `Fail (no shared cipher)`  ||
   ||=  -  =||=  BF-CBC  =||  Partial  ||  ''[[span(style=color: #806000, **Weak** BF-CBC )]]''  ||