Hi guys, I'm looking for help as I've read the HOWTO page but couldn't find what I was looking for. So here is the situation : Netgear Router D6400 comes with OpenVPN feature. After following the different steps to generate the ca.cert, client.key, client.crt and client1.ovpn I'm trying to make it working with Open VPN software for windows but it ends with some WARNINGS. [i][b] 2021-06-28 16:40:55 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.[/b][/i] So I changed that line and instead, I get this log: [b][i]Mon Jun 28 17:01:48 2021 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.[/i][/b] But the most problematic (I suppose), is this WARNING : [i][b]No server certificate verification method has been enabled[/b][/i] Since the Netgear D6400 is self-generating the different certificates I don't know what I'm supposed to do to change anything... All I'm supposed to do is to rename my TAP Windows adapter into NETGEAR-VPN (and to place the files in C:\Users\xxx\OpenVPN\config) Which I of course did... Do you know then what I could possibly do else ?

Setting up OpenVPN with a Netgear D6400

plkw

Hi guys,

I'm looking for help as I've read the HOWTO page but couldn't find what I was looking for.
So here is the situation :

Netgear Router D6400 comes with OpenVPN feature.
After following the different steps to generate the ca.cert, client.key, client.crt and client1.ovpn I'm trying to make it working with Open VPN software for windows but it ends with some WARNINGS.

2021-06-28 16:40:55 DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-128-CBC' to --data-ciphers or change --cipher 'AES-128-CBC' to --data-ciphers-fallback 'AES-128-CBC' to silence this warning.

So I changed that line and instead, I get this log:
Mon Jun 28 17:01:48 2021 WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.

But the most problematic (I suppose), is this WARNING :
No server certificate verification method has been enabled
Since the Netgear D6400 is self-generating the different certificates I don't know what I'm supposed to do to change anything...
All I'm supposed to do is to rename my TAP Windows adapter into NETGEAR-VPN (and to place the files in C:\Users\xxx\OpenVPN\config) Which I of course did...

Do you know then what I could possibly do else ?