technokhan Good day! First let me apologize if I posted this in the wrong forum, this is my first post period here. Secondly let me appologize if this is a dumb or restated question as I did not find what I was looking for. That aside here we go... I was asked by my company to put tigether an OpenVPN for our SIP phones. This was not a big deal, got it up and running fairly easily. However one of our stores is using a model phone that does not, and I quote 'Support SHA256'. To be fair I am fairly knew to the VPN/Keys/Certs, and all of that so I may just not be understanding the information correctly. But my question is this, is there a way to change the SHA to something else if it exists? The only thing I could find was related to ciphers. And again pardon my ignorance I am picking up information as I explore this. The phones in question are Yealink VoIP devices. Some of our models work just fine with my default set up. (I followed the guide from OpenVPN and the phone manufacturer to make sure I had config files right). So I am unsure just where to go with the fact that some of our phones do not support SHA256 and how to go about changing that on our VPN server. Any help would be greatly appreciated and I again apologize if this is the wrong spot or a dumb already answered question. Thank you very much! If further information is needed please ask and I will provide as soon as possible. Thanks again!
technokhan Here is my server config file. Sorry it was not included in the first post. local X.X.X.X port 1194 proto udp dev tun ca /etc/openvpn/keys/ca.crt cert /etc/openvpn/keys/server.crt key /etc/openvpn/keys/server.key dh /etc/openvpn/keys/dh2048.pem server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 192.168.10.0 255.255.255.0" client-to-client keepalive 10 120 comp-lzo persist-key persist-tun status openvpn-status.log verb 3
Traffic technokhan wroteone of our stores is using a model phone that does not, and I quote 'Support SHA256'. who are you quoting ?
