- # 2024-07-17
- # 1) https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-11#step-4-configuring-the-openvpn-service
- # 2) https://archive.is/5Im7t#step-4-configuring-the-openvpn-service
- # 3) https://web.archive.org/web/20240717114611/https://www.digitalocean.com/community/tutorials/how-to-set-up-an-openvpn-server-on-debian-11#step-4-configuring-the-openvpn-service
- # 4.1) "«--cipher set to 'AES-256-CBC' but missing in --data-ciphers» in OpenVPN logs":
- # https://github.com/dmitrii-fediuk/5.9.188.84/issues/84
- # 4.2) "How did I fix «--cipher set to 'AES-256-CBC' but missing in --data-ciphers» for OpenVPN in Debian 12?":
- # https://df.tips/t/2269
- # 5) «Note: --cipher is not set.
- # OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case.
- # If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration
- # and/or add BF-CBC to --data-ciphers.»: https://github.com/dmitrii-fediuk/5.9.188.84/issues/85
- # 7.1) «cipher 'AES-256-CBC' in --data-ciphers is not supported by ovpn-dco, disabling data channel offload»:
- # https://github.com/dmitrii-fediuk/5.9.188.84/issues/87
- # 7.2) https://www.reddit.com/r/PrivateInternetAccess/comments/j1iyl7/comment/g708dsw
- # 8) «crypto_alg: AES-256-GCM:AES-128-GCM not found»: https://github.com/dmitrii-fediuk/5.9.188.84/issues/89
- # 9) https://community.openvpn.net/openvpn/wiki/CipherNegotiation
- cipher AES-256-GCM
- data-ciphers AES-256-GCM