Hello,
I did manage to get Open VPN running on my diskstation. But I need to optmize it.
I do get the following warnings in the log-file:
* WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
->Where should this "allow-compression yes" changed?
* DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.
-> Shall I change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' or anything else?
* WARNING: No server certificate verification method has been enabled. See
http://openvpn.net/howto.html#mitm for more info.
->What shall I do? Where should anything be changed?
* WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
-> How should I change the config here? Should I put that in addition into it or change anything?
I hope you will be able to help me. Thanks in advance.
Paiper
