From: Arne Schwabe <arne@rfc2549.org>
Date: Wed, 4 Mar 2015 14:23:45 +0000 (+0100)
Subject: Document the default for tls-cipher.
X-Git-Tag: v2.4_alpha1~324
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=77f464bddcfcc958f10fd3e9c45e1cb46d5206d0;p=thirdparty%2Fopenvpn.git

Document the default for tls-cipher.

Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1425479025-7573-2-git-send-email-arne@rfc2549.org>
URL: http://article.gmane.org/gmane.network.openvpn.devel/9503

Signed-off-by: Gert Doering <gert@greenie.muc.de>
---

diff --git a/doc/openvpn.8 b/doc/openvpn.8
index a8c189c91..95515668f 100644
--- a/doc/openvpn.8
+++ b/doc/openvpn.8
@@ -4514,6 +4514,9 @@ of security they both support.
 Use
 .B \-\-show-tls
 to see a list of supported TLS ciphers.
+
+The default for --tls-cipher is to use PolarSSL's default cipher list
+when using PolarSSL or "DEFAULT:!EXP:!PSK:!SRP:!kRSA" when using OpenSSL.
 .\"*********************************************************
 .TP
 .B \-\-tls-timeout n