Question about redundant reneg-sec statements

jamesp-brightpattern

Hi,

Suppose an OpenVPN client has the following two lines in their configuration file:

"reneg-sec 600"
"reneg-sec 5000"

Which value of reneg-sec will the client end up using?

Also, consider the following: Suppose that the client has the following line in their configuration file:

"reneg-sec 600",

and also that the OpenVPN server has the line 'push "reneg-sec 5000"' in it's configuration file. Which reneg-sec value will the client end up using in this case?

Thank you,
James Pedersen

TinCanTech

jamesp-brightpattern wrote Suppose an OpenVPN client has the following two lines in their configuration file:

"reneg-sec 600"
"reneg-sec 5000"

Which value of reneg-sec will the client end up using?

Which ever falls last in the file - 5000.

jamesp-brightpattern wrote Also, consider the following: Suppose that the client has the following line in their configuration file:

"reneg-sec 600",

and also that the OpenVPN server has the line 'push "reneg-sec 5000"' in it's configuration file. Which reneg-sec value will the client end up using in this case?

--reneg-* cannot be pushed.

jamesp-brightpattern

Ok, thank you for clarifying this!

-James Pedersen