Changes between Version 62 and Version 63 of CipherNegotiation

Timestamp:

07/29/21 01:22:38 (3 years ago)

Author:

tct

Comment:

--

CipherNegotiation

@@ -20 +20 @@
     * Openvpn Clients which do not support `--data-ciphers` (Openvpn 2.4, 2.3)[[br]]
       [[br]]
-      Solution: Upgrade[[br]]
+      **Solution: Upgrade**[[br]]
       Or, use `--data-ciphers-fallback` in your Server configuration.[[br]]
       [[br]]
     * Openvpn Clients using `--ncp-disable` DEPRECATED (Openvpn 2.4)[[br]]
       [[br]]
-      Solution: Do NOT use `--ncp-disable`[[br]]
+      **Solution:** Do NOT use `--ncp-disable`[[br]]
       EVER[[br]]
       [[br]]
@@ -34 +34 @@
     * Openvpn Server that does not support Cipher Negotiation:[[br]]
       [[br]]
-      Solution:  Upgrade[[br]]
-      Otherwise, Both Client and Server will fall-back to an INSECURE BF-CBC cipher.[[br]]
+      **Solution:  Upgrade**[[br]]
+      Otherwise, both Client and Server will DEFAULT to an INSECURE BF-CBC cipher.[[br]]
+      ... Unless both Client and Server have a **secure** `--cipher` configured .[[br]]
 ----
 **All**: `--cipher ALG` - Data channel cipher. **Will be deprecated**.[[br]]