Re: [Openvpn-devel] [Openvpn-users] why doesn't openvpn negotiate settings?

2013-08-01 Thread Jan Just Keijser
Gert Doering wrote: Hi, On Tue, Jul 30, 2013 at 04:57:31PM +0200, Ralf Hildebrandt wrote: I was wondering about this as well. This makes it extremely hard to every change the cipher (i.e. if it's not considered "safe" anymore) It needs to be implemented, tested, etc. - and I'm not sur

Re: [Openvpn-devel] [Openvpn-users] why doesn't openvpn negotiate settings?

2013-08-01 Thread Gert Doering
Hi, On Thu, Aug 01, 2013 at 12:02:55PM +0200, Jan Just Keijser wrote: > It should be possible to add negotiation without completely breaking > backwards compatibility; right now, when a server pushes an option to > the client that is unrecognized the client will print a warning but it > will no

Re: [Openvpn-devel] [Openvpn-users] why doesn't openvpn negotiate settings?

2013-08-01 Thread Jan Just Keijser
Hi Gert, Gert Doering wrote: Hi, On Thu, Aug 01, 2013 at 12:02:55PM +0200, Jan Just Keijser wrote: It should be possible to add negotiation without completely breaking backwards compatibility; right now, when a server pushes an option to the client that is unrecognized the client will prin