opnsense
Fix OpenVPN client config for MikroTik OpenVPN server
MikroTik provides OpenVPN with a very old OpenSSL version. If it is used as a server, the OPNsense version cannot be configured to connect to it as the required cipher cannot be selected on the web interface.
Also the form hides those entries from the user in the client configuration.
Also improve the UI slightly. Data Ciphers and Data Ciphers Fallback use different select styles currently, which makes it look strange.
Why don't you use the aes256-gcm that mikrotik provides and openvpn recommends as default.
CBC doesn't provide authentication and has to be handled by mikrotik...
@sopex depends on the ROS version maybe. The version of ROS 6 I am contacting, does not support GCM at all.
@sopex depends on the ROS version maybe. The version of ROS 6 I am contacting, does not support GCM at all.
Yes, you are correct, it was added 2-3 years ago in 7 something. ;)
