On client (OpenVPN 2.4.4 x86_64-w64-mingw32) i seen:
WARNING: INSECURE cipher with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC)
so after searching someone suggested adding: "cipher AES-256-CBC" into client .ovpn configuration file
I did, and during connecting i seen:
WARNING: 'cipher' is used inconsistently, local='cipher AES-256-CBC', remote='cipher BF-CBC'
WARNING: 'keysize' is used inconsistently, local='keysize 256', remote='keysize 128'
Connection was established, and then are errors:
Authenticate/Decrypt packet error: cipher final failed
On my OpenVPN server:
OpenVPN 2.3.12 x86_64-redhat-linux-gnu
library versions: OpenSSL 1.0.1e-fips 11 Feb 2013, LZO 2.03
please which file i may need to edit to define new, compatible cipher?
