--- a/src/nm-openvpn-service.c 2016-04-23 19:44:39.000000000 +0200 +++ b/src/nm-openvpn-service.c 2016-04-23 19:45:08.947430744 +0200 @@ -139,6 +139,7 @@ { NM_OPENVPN_KEY_DEV, G_TYPE_STRING, 0, 0, FALSE }, { NM_OPENVPN_KEY_DEV_TYPE, G_TYPE_STRING, 0, 0, FALSE }, { NM_OPENVPN_KEY_TUN_IPV6, G_TYPE_STRING, 0, 0, FALSE }, + { NM_OPENVPN_KEY_TLS_CIPHER, G_TYPE_STRING, 0, 0, FALSE}, { NM_OPENVPN_KEY_TLS_REMOTE, G_TYPE_STRING, 0, 0, FALSE }, { NM_OPENVPN_KEY_REMOTE_CERT_TLS, G_TYPE_STRING, 0, 0, FALSE }, { NM_OPENVPN_KEY_NS_CERT_TYPE, G_TYPE_STRING, 0, 0, FALSE }, @@ -1371,6 +1372,13 @@ add_openvpn_arg (args, tmp); } + /* TLS Ciphers */ + tmp = nm_setting_vpn_get_data_item (s_vpn, NM_OPENVPN_KEY_TLS_CIPHER); + if (tmp && strlen(tmp)) { + add_openvpn_arg (args, "--tls-cipher"); + add_openvpn_arg (args, tmp); + } + /* tls-remote */ tmp = nm_setting_vpn_get_data_item (s_vpn, NM_OPENVPN_KEY_TLS_REMOTE); if (tmp && strlen (tmp)) { --- a/shared/nm-openvpn-service-defines.h 2016-04-05 22:53:57.000000000 +0200 +++ b/shared/nm-openvpn-service-defines.h 2016-04-23 19:45:25.139500707 +0200 @@ -59,6 +59,7 @@ #define NM_OPENVPN_KEY_STATIC_KEY_DIRECTION "static-key-direction" #define NM_OPENVPN_KEY_TA "ta" #define NM_OPENVPN_KEY_TA_DIR "ta-dir" +#define NM_OPENVPN_KEY_TLS_CIPHER "tls-cipher" #define NM_OPENVPN_KEY_TUNNEL_MTU "tunnel-mtu" #define NM_OPENVPN_KEY_USERNAME "username" #define NM_OPENVPN_KEY_TAP_DEV "tap-dev"