Hi Guys,
I have the small problem that the server ignores everything that I set at the cipher config.
Client:
dev tun
tun-ipv6
client
proto udp
remote srv.host.net 1194
resolv-retry infinite
nobind
persist-key
persist-tun
redirect-gateway def1 bypass-dhcp
redirect-gateway ipv6
auth none
cipher AES-128-CBC
ca ca.crt
cert BER01.crt
key BER01.key
comp-lzo no
verb 3
Server:
dev tun
tun-ipv6
proto udp6
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh2048.pem
user nobody
group nogroup
server 172.16.0.0 255.255.255.0
server-ipv6 fd8b:75bb:54e8:9a87::/64
persist-key
persist-tun
status /var/log/openvpn-status.log
verb 3
client-to-client
client-config-dir ccd
push "route-ipv6 fd8b:75bb:54e8:9a87::/64"
#set the dns servers
push "dhcp-option DNS 8.8.8.8"
push "dhcp6-option DNS 2001:4860:4860::8888"
log-append /var/log/openvpn
comp-lzo no
duplicate-cn
keepalive 10 120
cipher AES-128-CBC
auth none
But when I look at the client Log, ist still use the 256 version.
May 1 16:30:12 saturn ovpn-client[24776]: Data Channel Encrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
May 1 16:30:12 saturn ovpn-client[24776]: Data Channel Decrypt: Cipher 'AES-256-GCM' initialized with 256 bit key
Does anyone know, why?
Regards
