Changes between Version 6 and Version 7 of CipherNegotiation

Timestamp:

08/11/20 10:12:26 (4 years ago)

Author:

tct

Comment:

--

CipherNegotiation

@@ -1 +1 @@
 = Cipher Negotiation
 Data channel cipher negotiation is complicated.  This wiki defines the expected behaviour between OpenVPN servers and clients.
+[[TOC(notitle, inline)]]
 
 == OpenVPN Directives:
@@ -23 +24 @@
 ||||  `--cipher`  ||||=  `--data-cipher`  =||=  `-fallback`  =||||  NCP  ||  Expected  ||
 ||  Client  ||  Server  ||=  Client  =||=  Server  =||=  =||  Client  ||  Server  ||       ||
-||    -     ||    -     ||=  -       =||=  AES-256-GCM:AES-128-GCM  =||=  -  =||  YES  ||  YES  ||  OK  ||
-||  BF-CBC  ||  -       ||=  -       =||=  AES-256-GCM:AES-128-GCM  =||=  -  =||  YES  ||  YES  ||  OK  ||
+||    -     ||    -     ||=  -       =||=  AES-256-GCM:AES-128-GCM  =||=  -  =||  NO  ||  YES  ||  OK  ||
+||  BF-CBC  ||  -       ||=  -       =||=  AES-256-GCM:AES-128-GCM  =||=  -  =||  NO  ||  YES  ||  FAIL  ||
+||  BF-CBC  ||  -       ||=  -       =||=  AES-256-GCM:AES-128-GCM  =||=  BF-CBC  =||  NO  ||  YES  ||  OK  ||
 
 ==== Client version 2.2