Hi all,
We have got some OpenVPN connections with different VPN servers.
In the OpenVPN GUI entry, I've imported the original .ovpn file and it selected "Cipher" and set it to "AES-256-CBC".
Using the old OpenVPN 2.5.5, this works well.
If I upgrade to OpenVPN 2.6.14, I receive this message in OpenVPN and it fails to connect:
DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
If I go to the Additional Parameters and add this line at the top, it works without any issues:
data-ciphers AES-256-CBC
In my .ovpn, data-ciphers was not present, only "cipher AES-256-CBC"
Is it possible to replace the cipher drop down or add the data-ciphers option?
Thanks!
Sander
Hello,
We already have a ticket opened to fix this. We're not sure yet if we're gonna automatically set the data-ciphers to support 2.6 or simply add a new setting like you mention, but we'll let you know as soon as we make any progress.
Regards
Jonathan Del Signore
Hi all,
We have got some OpenVPN connections with different VPN servers.
In the OpenVPN GUI entry, I've imported the original .ovpn file and it selected "Cipher" and set it to "AES-256-CBC".
Using the old OpenVPN 2.5.5, this works well.
If I upgrade to OpenVPN 2.6.14, I receive this message in OpenVPN and it fails to connect:
DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations.
If I go to the Additional Parameters and add this line at the top, it works without any issues:
data-ciphers AES-256-CBC
In my .ovpn, data-ciphers was not present, only "cipher AES-256-CBC"
Is it possible to replace the cipher drop down or add the data-ciphers option?
Thanks!
Sander
@sander02
Hi,
try to edit your ovpn config, and add this to a new line above <ca>:
tls-cipher "DEFAULT:@SECLEVEL=0"
It should work then?
Hello,
A "Data-ciphers" property will be added to OpenVPN entries in version 2025.3.12.0.
Regards
Jonathan Del Signore