Re: [Openvpn-users] cipher selection

2020-04-29 Thread Leroy Tennison via Openvpn-users
vpn-users Sent: Wed, Apr 29, 2020 9:52 am Subject: Re: [Openvpn-users] cipher selection Hi, On Wed, Apr 29, 2020 at 02:36:36PM +, Leroy Tennison via Openvpn-users wrote: > Well, this is unfortunate, reading your "their cipher setting is sent in the > OCC handshake to the server,

Re: [Openvpn-users] cipher selection

2020-04-29 Thread Gert Doering
Hi, On Wed, Apr 29, 2020 at 02:36:36PM +, Leroy Tennison via Openvpn-users wrote: > Well, this is unfortunate, reading your "their cipher setting is sent in the > OCC handshake to the server, and the server can handle different ciphers to > different clients" I thought I'd try setting a cip

Re: [Openvpn-users] cipher selection

2020-04-29 Thread Leroy Tennison via Openvpn-users
e- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Wed, Apr 29, 2020 12:50 am Subject: Re: [Openvpn-users] cipher selection Hi, On Tue, Apr 28, 2020 at 10:23:10PM +, Leroy Tennison via Openvpn-users wrote: > Server is 2.3.10, clients are "various" (but not o

Re: [Openvpn-users] cipher selection

2020-04-29 Thread Leroy Tennison via Openvpn-users
Thank you, you've given me options to try, I appreciate it. -Original Message- From: Gert Doering To: Leroy Tennison Cc: openvpn-users Sent: Wed, Apr 29, 2020 12:50 am Subject: Re: [Openvpn-users] cipher selection Hi, On Tue, Apr 28, 2020 at 10:23:10PM +, Leroy Tenniso

Re: [Openvpn-users] cipher selection

2020-04-28 Thread Gert Doering
Hi, On Tue, Apr 28, 2020 at 10:23:10PM +, Leroy Tennison via Openvpn-users wrote: > Server is 2.3.10, clients are "various" (but not older than 2.3.10).  A few > questions: > Is there a way to tell what cipher an active connection is using? There's "TLS cipher" (which it will log) and "data

[Openvpn-users] cipher selection

2020-04-28 Thread Leroy Tennison via Openvpn-users
Server is 2.3.10, clients are "various" (but not older than 2.3.10).  A few questions: Is there a way to tell what cipher an active connection is using? If i want to set a cipher on the server, do all clients have to be explicitly configured the same way?  Put another way, is there a way to migra