]> git.ipfire.org Git - thirdparty/openvpn.git/commit
do not include --cipher value in data-ciphers
authorAntonio Quartulli <a@unstable.cc>
Sat, 4 Sep 2021 09:56:26 +0000 (11:56 +0200)
committerGert Doering <gert@greenie.muc.de>
Mon, 20 Sep 2021 12:30:45 +0000 (14:30 +0200)
commit65f6da8eeb84fbcea357765e13fa73d0169a143c
tree9395551348e38e5f5dfa46d294b4ed2f710286df
parentc768ee96b49a3df459f584d6050802312815deec
do not include --cipher value in data-ciphers

The --cipher option has been there since a while, but it became more and
more confusing since the introduction of NCP (data cipher negotiation).

The fallback cipher can now be specified via --data-cipher-fallback,
while the list of accepted ciphers is specified via --data-ciphers.

--cipher can still be used for compatibility reasons, but won't affect
the cipher negotiation.

Adjust manpage to make clear that using --cipher in today's config really
is a thing from the past, and --data-ciphers should be used instead.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Signed-off-by: Antonio Quartulli <a@unstable.cc>
Acked-by: Arne Schwabe <arne@rfc2549.org>
Message-Id: <20210904095629.6273-5-a@unstable.cc>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22799.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Changes.rst
doc/man-sections/generic-options.rst
doc/man-sections/protocol-options.rst
src/openvpn/options.c
src/openvpn/ssl_ncp.c
src/openvpn/ssl_ncp.h