Merge branch 'tweakConfig' into 'develop'

move to a better cipher See merge request !5
8 years ago · 3dce1a2d6a
parent 9f9f06d389 b2bce4abfc
commit 3dce1a2d6a
2 changed files with 6 additions and 5 deletions
--- a/views/etc/openvpn-client.conf.twig
+++ b/views/etc/openvpn-client.conf.twig
@ -21,7 +21,6 @@ key client.key

 remote-cert-tls server

-cipher BF-CBC
+cipher AES-256-CBC

 comp-lzo
-verb 3
--- a/views/etc/openvpn-server.conf.twig
+++ b/views/etc/openvpn-server.conf.twig
@ -19,7 +19,7 @@ push "redirect-gateway def1 bypass-dhcp"
 push "dhcp-option DNS {{ server.getFirstDns() }}"
 push "dhcp-option DNS {{ server.getSecondDns() }}"
 keepalive 10 120
-cipher BF-CBC
+cipher AES-256-CBC

 crl-verify crl.pem

@ -30,3 +30,5 @@ group nogroup

 persist-key
 persist-tun
+
+verb 0