On 15-09-17 17:35, Gert Doering wrote: > Thanks for testing the per-client ccd cipher patch - this is definitely > useful. Interaction with NCP needs a bit more thought, it seems.
Yeah. Until now, we've always said "NCP trumps --cipher". I guess the question is whether 'cipher' in a CCD file should trump (ie, disable) NCP. It might be what users expect, but it's also somewhat inconsistent. I think it's better to have people explicitly add 'ncp-disable' to the ccd too if they want it to trump NCP. (I'd need to check whether that's allowed right now.) -Steffan
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
