{"id":16480,"date":"2023-02-06T13:41:57","date_gmt":"2023-02-06T12:41:57","guid":{"rendered":"https:\/\/www.boc.de\/watchguard-info-portal\/?p=16480"},"modified":"2024-02-02T14:32:11","modified_gmt":"2024-02-02T13:32:11","slug":"openvpn-data-ciphers-ab-openvpn-2-6-x","status":"publish","type":"post","link":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/2023\/02\/openvpn-data-ciphers-ab-openvpn-2-6-x\/","title":{"rendered":"OpenVPN data-ciphers ab OpenVPN 2.6.x"},"content":{"rendered":"

Aktuell kann es bei Verwendung der aus der WatchGuard exportierten SSLVPN – Konfigurationsdatei “client.ovpn” mit dem OpenVPN Community Client (ab Version 2.6.x) zu einer Fehlermeldung \u00e4hnlich “Unrecognized option or missing or extra parameter(s)” kommen.<\/p>\n

Beispiel unter openVPN 2.5.x:<\/p>\n

DEPRECATED OPTION: –cipher set to ‘aes-128-cbc’ but missing in –data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore –cipher for cipher negotiations. Add ‘aes-128-cbc’ to –data-ciphers or change –cipher ‘aes-128-cbc’ to –data-ciphers-fallback ‘aes-128-cbc’ to silence this warning.<\/strong><\/p>\n

oder<\/p>\n

OPTIONS ERROR: failed to negotiate cipher with server. Add the server’s cipher (‘AES-256-CBC’) to –data-ciphers (currently ‘AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305’) if you want to connect to this server.<\/strong><\/p>\n

<\/p>\n

bzw.<\/p>\n

\"\"<\/p>\n

Das Problem l\u00e4sst sich l\u00f6sen in dem man die OpenVPN-Konfigurationsdatei editiert und die Zeile beginnend mit dem Parameter “cipher” ab\u00e4ndert (die Verschl\u00fcsselungsparameter sind abh\u00e4ngig von der Server-Konfiguration):<\/p>\n

Beispiel:<\/p>\n

Die Zeile<\/p>\n

cipher AES-256-CBC<\/pre>\n
durch<\/p>\n
data-ciphers AES-256-CBC<\/pre>\n
ersetzen.<\/p>\n
 <\/p>\n","protected":false},"excerpt":{"rendered":"
Aktuell kann es bei Verwendung der aus der WatchGuard exportierten SSLVPN – Konfigurationsdatei “client.ovpn” mit dem OpenVPN Community Client (ab Version 2.6.x) zu einer Fehlermeldung \u00e4hnlich “Unrecognized option or missing or extra parameter(s)” kommen. Beispiel unter openVPN 2.5.x: DEPRECATED OPTION: –cipher set to ‘aes-128-cbc’ but missing in –data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore –cipher for cipher negotiations. Add ‘aes-128-cbc’ to –data-ciphers or change –cipher … Weiterlesen OpenVPN data-ciphers ab OpenVPN 2.6.x<\/span> »<\/span><\/a><\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[445],"tags":[556,528,89],"class_list":["post-16480","post","type-post","status-publish","format-standard","hentry","category-aktuelle-nachrichten","tag-cipher","tag-openvpn","tag-sslvpn"],"_links":{"self":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/16480"}],"collection":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/comments?post=16480"}],"version-history":[{"count":21,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/16480\/revisions"}],"predecessor-version":[{"id":19016,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/posts\/16480\/revisions\/19016"}],"wp:attachment":[{"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/media?parent=16480"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/categories?post=16480"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/wordpress.boc.de\/watchguard-info-portal\/wp-json\/wp\/v2\/tags?post=16480"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}