Ubuntu
openvpn package

  1. Bug #1379132
  2. Comment #2

Comment 2 for bug 1379132

Revision history for this message
Christian Ehrhardt  (paelzer) wrote :

The default of a 16.04<->16.04 connection still is:
Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Control Channel: TLSv1.2, cipher TLSv1/SSLv3 DHE-RSA-AES256-GCM-SHA384, 2048 bit RSA

In bug 1567717 Seth tried to change defaults&supported ciphers for security reasones.
I mentioned this bug there - depending on how/what we change there we could at least easily address #2 of this bug to set the default to AES - maybe 256.