Add aes-128-cbc as additional cipher option

qdm12 · Aug 13, 2022 · 5005f10 · 5005f10
1 parent 52121dd
commit 5005f10
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/internal/provider/vpnsecure/openvpnconf.go b/internal/provider/vpnsecure/openvpnconf.go
@@ -14,7 +14,8 @@ func (p *Provider) OpenVPNConfig(connection models.Connection,
 		RemoteCertTLS: true,
 		AuthUserPass:  true,
 		Ping:          10,
-		Ciphers:       []string{openvpn.AES256cbc},
+		// note DES-CBC is not added since it's quite unsecure
+		Ciphers: []string{openvpn.AES256cbc, openvpn.AES128cbc},
 		ExtraLines: []string{
 			"comp-lzo",
 			"float",