|
@@ -138,7 +138,7 @@ discard block |
|
|
block discarded – undo |
|
138
|
138
|
'tls-version-min 1.2', |
|
139
|
139
|
'tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384', |
|
140
|
140
|
'auth SHA256', |
|
141
|
|
- 'dh none', // Only ECDHE |
|
|
141
|
+ 'dh none', // Only ECDHE |
|
142
|
142
|
|
|
143
|
143
|
// 2.4 only clients: 'ncp-ciphers AES-256-GCM', |
|
144
|
144
|
// 2.4 only clients: 'cipher AES-256-GCM', // also should update the client config to set this, but ncp overrides --cipher |
|
@@ -184,7 +184,7 @@ discard block |
|
|
block discarded – undo |
|
184
|
184
|
} |
|
185
|
185
|
|
|
186
|
186
|
if ($profileConfig->getItem('twoFactor')) { |
|
187
|
|
- $serverConfig[] = 'auth-gen-token'; // Added in OpenVPN 2.4 |
|
|
187
|
+ $serverConfig[] = 'auth-gen-token'; // Added in OpenVPN 2.4 |
|
188
|
188
|
$serverConfig[] = 'auth-user-pass-verify /usr/libexec/vpn-server-node-verify-otp via-env'; |
|
189
|
189
|
} |
|
190
|
190
|
|
Please login to merge, or discard this patch.