[Request] How to TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 ?

lolex

Hi,

i need to set-up a OPENVPN Server and I'm struggling with some config-params.

First of all, could somebody explain the difference between the param cipher and tls-cipher?

My goal is it to set-up this Ciphersuite: TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256

Is it enough to have this line?: tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256

What about EC-Parameter? I need a special elliptic curve. Where can I specify it?

Im very new to this. So any help is appreciated.

Traffic

lolex wroteI'm struggling

we all did at first 8-)

lolex wrotedifference between the param cipher and tls-cipher

It's not easy but:

tsl-cipher: cipher for the TLS session
https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage#lbAK
cipher: cipher for the data channel
https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage#lbAJ

Some heavy reading:
https://community.openvpn.net/openvpn/wiki/SecurityOverview
https://community.openvpn.net/openvpn/wiki/How_does_PKI_work
https://community.openvpn.net/openvpn/wiki/WhyChooseTLSAsOpenvpnsUnderlyingAuthenticationAndKeyNegotiationProtocol

lolex wroteI need a special elliptic curve. Where can I specify it

The only place I have seen that you can specify an EC is in Easy-RSA:vars file (to build your PKI)