I have my OpenVPN server running with the tls-auth option, and it works just fine. Recently though I've been reading a bit on hardening, and decided to go with a specific cipher. Before I did not specify one. So I ran openvpn --show-tls and picked a cipher that would work for the client and server and popped one in the client and server config files. When I restart the client connection, it generates an error: [code]Problem with cipher list: DHE-RSA-AES-256-SHA256: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match[/code] Even though that cipher appears on the cipher list and is specified in both config files. If I remove the line: [code]tls-cipher DHE-RSA-AES256-SHA256[/code] from both configs, OpenVPN works as before. So, why doesn't it work when I do specify the cipher, but not if I do? And if I don't, what cipher does it use?

What happens if tls-cipher is not specified?

frozenlead

I have my OpenVPN server running with the tls-auth option, and it works just fine. Recently though I've been reading a bit on hardening, and decided to go with a specific cipher. Before I did not specify one.

So I ran openvpn --show-tls and picked a cipher that would work for the client and server and popped one in the client and server config files. When I restart the client connection, it generates an error:

Problem with cipher list: DHE-RSA-AES-256-SHA256: error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match

Even though that cipher appears on the cipher list and is specified in both config files. If I remove the line:

tls-cipher DHE-RSA-AES256-SHA256

from both configs, OpenVPN works as before.

So, why doesn't it work when I do specify the cipher, but not if I do? And if I don't, what cipher does it use?