Am 23.09.19 um 16:34 schrieb Gert Doering: > Hi, > > On Mon, Sep 23, 2019 at 03:32:24PM +0200, Arne Schwabe wrote: >> + if (!(tls_item_in_cipher_list("AES-128-GCM", options->ncp_ciphers) >> + && tls_item_in_cipher_list("AES-256-GCM", >> options->ncp_ciphers))) > > What about AES-192-GCM? What *exactly* does IV_NCP=2 guarantee? >
Our manpage says only 128 and 256 are in the default ncp-cihper list, so lets not guarantee 192. Arne
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel