Data Channel Encrypt: Cipher 'BF-CBC' initialized with ...

jompsi

Hi all

I have a question to the following lines:

 Aug 12 10:23:38 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Aug 12 10:23:38 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Aug 12 10:23:38 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Aug 12 10:23:38 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Aug 12 10:23:39 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 2048 bit RSA

I have a site to site openvpn connection and I get the 5 lines from above every 3 minutes. I have another site to site connection which generates this lines just every hour.

This is the SSL/TLS Handshake, but why do they do it so often?

Thanks and kind regards
jompsi

maikcat

post your configs please...

Michael.

jompsi

Hi Michael

The OpenVPN runs on an edge router.

description "A VPN"
 local-port 1195
 mode server
 openvpn-option "--verb 3"
 protocol udp
 server {
     client one {
         ip 101.187.27.12
         push-route 192.168.5.0/24
         subnet 172.16.11.5/24
     }
     push-route 192.168.5.0/24
     subnet 101.187.27.0/24
     topology point-to-point
 }
 tls {
     ca-cert-file /config/auth/a-vpn/ca.crt
     cert-file /config/auth/a-vpn/vd-vpn.crt
     dh-file /config/auth/a-vpn/dh2048.pem
     key-file /config/auth/a-vpn/vd-vpn.key
 }

I cant show you the configuration from the other side, because i have no access. Do you think this renegotiate interval comes from the other side?

Thanks and regards
jompsi