I've googled around for clarification on this but I'm still unsure of what the difference is between these two cipher options. Are they both used for different aspects of the communication (authentication vs encryption maybe?) or does one make the other redundant? I see plenty of examples where one or the other is used, but not many with both.
I am currently using AES256 with both options (on OpenVPN 2.2 - so using older style cipher names):-
cipher AES-256-CBC
tls-cipher DHE-RSA-AES256-SHA
# along with relevant certs, keys, etc...
auth SHA512
tls-auth ta.key 0
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
It's all working fine, but I'd like to get my head straight on the actual difference between cipher and tls-cipher.
