Hi, On Sat, Jan 06, 2024 at 07:03:37AM +0000, Peter Davis wrote: > 1- But I need to put the server and client keys in /etc/openvpn/server and > /etc/openvpn/client directories. Am I wrong?
Server keys go to the server file system.
Client keys go to the client file system.
CA cert goes everywhere, as it's the binding part that permits either
side to verify each other.
> 2- I used these lines in the server and client configuration files:
>
> data-ciphers AES-256-GCM
> cipher AES-256-GCM
Just... don't. --cipher is a no-op in 2.6.x, and data-ciphers already
contains AES-256-GCM, so setting these will just make your config file
longer, and do no good.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany g...@greenie.muc.de
signature.asc
Description: PGP signature
_______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users
