Am 23.09.19 um 16:34 schrieb Gert Doering:
> Hi,
> 
> On Mon, Sep 23, 2019 at 03:32:24PM +0200, Arne Schwabe wrote:
>> +        if (!(tls_item_in_cipher_list("AES-128-GCM", options->ncp_ciphers)
>> +              && tls_item_in_cipher_list("AES-256-GCM", 
>> options->ncp_ciphers)))
> 
> What about AES-192-GCM?  What *exactly* does IV_NCP=2 guarantee?
> 

Our manpage says only 128 and 256 are in the default ncp-cihper list, so
lets not guarantee 192.

Arne

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to