While experimenting with my OpenVPN config, I found that my auth option is ignored when using tls-crypt. Here's what I see:
Auth Config:
tls-auth ta.key
auth BLAKE2s256
Auth Log:
Outgoing Control Channel Authentication: Using 256 bit message hash 'BLAKE2s256' for HMAC authentication
Incoming Control Channel Authentication: Using 256 bit message hash 'BLAKE2s256' for HMAC authentication
Crypt Config:
tls-crypt ta.key
auth BLAKE2s256
Crypt Log:
Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Is this intended behavior, and if so, does anyone know if there are plans to allow specifying the hash when using tls-crypt?