diff options
| author | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-01 15:45:19 +0200 |
|---|---|---|
| committer | Antonio Quartulli <antonio@mandelbit.com> | 2026-10-09 15:41:29 +0200 |
| commit | f7a1fdf0266cf3149764b3608384f5a5092ab526 (patch) | |
| tree | 0dfba0d601dbabd7f24e309fdfd6b6c0bcc55554 /docs | |
| parent | 60144987946cc5ffaa9e29b5ca0dd5dbbf35e8ca (diff) | |
| download | vyos-documentation-f7a1fdf0266cf3149764b3608384f5a5092ab526.tar.gz vyos-documentation-f7a1fdf0266cf3149764b3608384f5a5092ab526.zip | |
openvpn: T9386: AEAD fallback ciphers can't be used with shared-secret-key
Note that "encryption data-ciphers-fallback" only takes CBC ciphers
together with "shared-secret-key".
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/configuration/interfaces/openvpn.md | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/docs/configuration/interfaces/openvpn.md b/docs/configuration/interfaces/openvpn.md index 2c31ea80..b2f7c584 100644 --- a/docs/configuration/interfaces/openvpn.md +++ b/docs/configuration/interfaces/openvpn.md @@ -110,6 +110,9 @@ supported**. This option ensures consistent encryption between two static peers without cipher negotiation capability. ::: + +With `shared-secret-key`, AEAD ciphers (`aes128gcm`, `aes192gcm`, `aes256gcm`, +`chacha20poly1305`) are rejected: only the CBC ciphers and `none` can be used. ``` |