diff options
| author | Christian Breunig <christian@breunig.cc> | 2026-10-10 17:49:56 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2026-10-10 17:49:56 +0200 |
| commit | f03c3e5f737bdcdd8d2a4e2d21147de9032bdbdb (patch) | |
| tree | 0dfba0d601dbabd7f24e309fdfd6b6c0bcc55554 /docs | |
| parent | 60144987946cc5ffaa9e29b5ca0dd5dbbf35e8ca (diff) | |
| parent | f7a1fdf0266cf3149764b3608384f5a5092ab526 (diff) | |
| download | vyos-documentation-f03c3e5f737bdcdd8d2a4e2d21147de9032bdbdb.tar.gz vyos-documentation-f03c3e5f737bdcdd8d2a4e2d21147de9032bdbdb.zip | |
Merge pull request #2337 from mandelbitdev/T9386-openvpn-shared-secret-aeadrolling
T9386: openvpn: AEAD fallback ciphers can't be used with shared-secret-key
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/interfaces/openvpn.md | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/configuration/interfaces/openvpn.md b/docs/configuration/interfaces/openvpn.md index 2c31ea80..b2f7c584 100644 --- a/docs/configuration/interfaces/openvpn.md +++ b/docs/configuration/interfaces/openvpn.md @@ -110,6 +110,9 @@ supported**. This option ensures consistent encryption between two static peers without cipher negotiation capability. ::: + +With `shared-secret-key`, AEAD ciphers (`aes128gcm`, `aes192gcm`, `aes256gcm`, +`chacha20poly1305`) are rejected: only the CBC ciphers and `none` can be used. ``` |