Hi there

Am I correct that to move off Blowfish cipher, we'll have to reconfigure
the openvpn servers and clients simultaneously? The server and clients
don't currently have "cipher" defined, but the newer clients are generating
those "cipher" warnings.

Also, am I correct that "cipher" cannot be used within a "<connection>"
block? ie there's no way to migrate - it has to be a "hard" outage.

I'm just wondering how other people do it. I can't see any way out of this
other than bringing up entirely independent server infrastructure, so that
the new clients can use the new servers while the old clients migrate.

Thanks

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +1 408 481 8171
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1
------------------------------------------------------------------------------
Developer Access Program for Intel Xeon Phi Processors
Access to Intel Xeon Phi processor-based developer platforms.
With one year of Intel Parallel Studio XE.
Training and support from Colfax.
Order your platform today. http://sdm.link/xeonphi
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to