From fa6cf4e5696507a50f28922f496c36f2cca09c31 Mon Sep 17 00:00:00 2001 From: Angristan Date: Thu, 16 Feb 2017 17:54:08 +0100 Subject: [PATCH] Update tls-cipher to use ECDHE and ECDSA --- openvpn-install.sh | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/openvpn-install.sh b/openvpn-install.sh index 9478855..dfe9954 100644 --- a/openvpn-install.sh +++ b/openvpn-install.sh @@ -466,7 +466,7 @@ auth SHA256 $CIPHER tls-server tls-version-min 1.2 -tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 +tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 status openvpn.log verb 3" >> /etc/openvpn/server.conf @@ -583,7 +583,7 @@ auth SHA256 $CIPHER tls-client tls-version-min 1.2 -tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256 +tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256 setenv opt block-outside-dns verb 3" >> /etc/openvpn/client-template.txt