From 3384d703d3198c13fb724e23ec0300e9538f9ebc Mon Sep 17 00:00:00 2001 From: _NSAKEY Date: Wed, 22 Feb 2017 22:12:14 -0600 Subject: [PATCH] tls-cipher tweaking. --- openvpn-install.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 6080e71..5f9f84b 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -466,7 +466,7 @@ auth SHA512 $CIPHER tls-server tls-version-min 1.2 -tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 +tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384 status openvpn.log verb 3" >> /etc/openvpn/server.conf @@ -583,7 +583,7 @@ auth SHA512 $CIPHER tls-client tls-version-min 1.2 -tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 +tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA512 setenv opt block-outside-dns verb 3" >> /etc/openvpn/client-template.txt