elliptic curve certs with tls-auth and dh

yurtesen

Hello,

1- If I understand correctly from [https://openvpn.net/community-resources/reference-manual-for-openvpn-2-4/]openvpn 2.4 manual[/url], if one is using `ECDH TLS cipher suites` then they can set `dh none`. This will have same security level as using dh key, is this a correct assumption?

2- About the tls-auth, the manual says "Use –tls-crypt instead if you want to use the key file to not only authenticate, but also encrypt the TLS control channel.".

Currently I do not have tls-crypt setup but in logs I see

 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384, 521 bit EC, curve: secp521r1

Does that mean that `tls-crypt` option is NOT necessary if elliptic curve is used? or is that some other "Control Channel" ? does it make any difference if one is using UDP or TCP?

Thanks!