[deleted]
We have an installed base of older Linux 2.4 kernel machines and newer Linux 2.6 kernel machines both types on a "hub and spoke" topology, with a central Server hub running OpenVPN Version 2.0.7.
Are we stuck with the "lowest common denominator" Data Channel encryption on our Central Hub server?
The 2.4 kernel machines use the lesser Data Channel Security of DES-EDE3-CBC, while our 2.6 kernel machines could use a favored AES-128-CBC, but They both need to be on the same network to the same hub.
The control channel (TLS) works great running the lesser cipher (DES-CBC3-SHA) on the old 2.4 kernel hosts, and the preferred cipher (DHE-RSA-AES256-SHA) on the newer 2.6 Kernel hosts.
Is there an openVPN version to get the central hub server to accept a stronger Data Channel encryption for the newer 2.6 Kernel peers yet still be accept to the older 2.4 kernel peers? The Control Channel Ciphers operate that way. How can we get the Data Channel ciphers to operate that way too?
Thanks!!
