SoftEther OpenVPN config is not compatible with latest openvpn

[quattrolinux]

Code: Select all

OPTIONS ERROR: failed to negotiate cipher with server.  Add the server's cipher ('AES-128-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.

From the manual:
2.4.x or lower: The cipher in --cipher is appended to --data-ciphers.

Question: how do I change server cipher from AES-128-CBC to one of openvpn 2.6.x default ciphers?

[solo]

1. update to v5 DE server
2. select your preferred "Encryption Algorithm Name" on the server
3. always enter algo name in ovpn "data-ciphers"

[spp]

Edit your config manually.

in openvpn-2.4.x should use --ncp-ciphers
in openvpn-2.5.x-2.6.x should use --data-ciphers

default cipher in latest openvpn is AES-256-GCM and AES-128-GCM

Note: softether not yet supported cipher negotiation introduced in openvpn-2.4 therefore only one cipher available.