Ubuntu
openvpn package

  1. Bug #1992595
  2. Comment #4

Comment 4 for bug 1992595

Revision history for this message
John (3-john-c) wrote :

Okay, I might have not been clear enough here:

The issue specifically is that I cannot find a way to change the default data cipher for a VPN connection in openvpn on Ubuntu.

In the .ovpn file I removed 'cipher' and replaced it with

data-ciphers AES-256-CBC:AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305

As suggested by Sergio.

This made no difference I got the same error as above.

Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305')

It's as if it's ignoring the data-ciphers value. I've tried using cipher, data-ciphers-fallback... it made no difference.

I tried changing the value with the Ubuntu VPN settings (Identity -> Advanced -> Security) and changing the Cipher to AES-256-CBC using the Cipher drop down menu then clicking 'Apply'. Again, the same error message in the logs:

Add the server's cipher ('AES-256-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305')

I tried picking another random cipher from the list (ARIA-192-CFB) to see if the error message changed: it didn't.