Wor
Hi All.
I've got a question about how to configure a server (openVPN 2.4.9) to use a certain set of cipher suites.
My scenario is a site-to-site setup between two devices/systems.
Listing the supported suites for TLS 1.3 that should be legal to use with the tls-ciphersuites directive:
> openvpn --show-tls
I see that the cipersuites I'd like to use are listed:
mbed TLS Name / NIST Name OpenSSL equivalent Value
TLS-PSK-WITH-AES-128-CBC-SHA256 PSK-AES128-CBC-SHA256 {0x00,0xAE}
TLS-PSK-WITH-AES-256-CBC-SHA384 PSK-AES256-CBC-SHA384 {0x00,0xAF}
TLS-PSK-WITH-AES-128-GCM-SHA256 PSK-AES128-GCM-SHA256 {0x00,0xA8}
TLS-PSK-WITH-AES-256-GCM-SHA384 PSK-AES256-GCM-SHA384 {0x00,0xA9}
TLS-PSK-WITH-AES-128-CCM PSK-AES128-CCM {0xC0,0xA4}
TLS-PSK-WITH-AES-256-CCM PSK-AES256-CCM {0xC0,0xA5}
TLS-PSK-WITH-AES-128-CCM-8 PSK-AES128-CCM8 {0xC0,0xA8}
TLS-PSK-WITH-AES-256-CCM-8 PSK-AES256-CCM8 {0xC0,0xA9}
TLS-PSK-WITH-CAMELLIA-128-CBC-SHA256 PSK-CAMELLIA128-SHA256 {0xC0,0x94}
TLS-PSK-WITH-CAMELLIA-256-CBC-SHA384 PSK-CAMELLIA256-SHA384 {0xC0,0x95}
TLS-PSK-WITH-CAMELLIA-128-GCM-SHA256 Not supported {0xC0,0x8D}
TLS-PSK-WITH-CAMELLIA-256-GCM-SHA384 Not supported {0xC0,0x8F}
TLS-PSK-WITH-NULL-SHA PSK-NULL-SHA {0x00,0x2C}
TLS-PSK-WITH-NULL-SHA256 PSK-NULL-SHA256 {0x00,0xB4}
TLS-PSK-WITH-NULL-SHA384 PSK-NULL-SHA256 {0x00,0xB5}
