Re: Transfer from one server to another, compress and digest

Hi,

On Sat, Jan 06, 2024 at 07:03:37AM +0000, Peter Davis wrote:
> 1- But I need to put the server and client keys in /etc/openvpn/server and /etc/openvpn/client directories. Am I wrong?

Server keys go to the server file system.

Client keys go to the client file system.

CA cert goes everywhere, as it's the binding part that permits either
side to verify each other.

> 2- I used these lines in the server and client configuration files:
> 
> data-ciphers AES-256-GCM        
> cipher AES-256-GCM

Just... don't.  --cipher is a no-op in 2.6.x, and data-ciphers already
contains AES-256-GCM, so setting these will just make your config file
longer, and do no good.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

-----BEGIN PGP SIGNATURE-----
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=N04N
-----END PGP SIGNATURE-----