OpenVPN â ñîñòàâå ïðîøèâêè îò ýíòóçèàñòîâ

[Asgard]

Ñãåíåðèë ñåðòèôèêàòû è êëþ÷è ñ ýëëèïòè÷åñêèìè êðèâûìè ïðè ïîìîùè OpenSSL è â ëîãàõ âèæó ñëåäóþùåå

# cat /tmp/openvpn.log|grep ECDH
Wed Nov 27 17:09:31 2013 194.44.31.233:2698 Control Channel: TLSv1, cipher TLSv1/SSLv3 ECDH-ECDSA-AES256-SHA

Ìîæåò êòî ïîäñêàæåò êàê ïåðåéòè îò ECDH ê ECDHE, âåäü äîëæíû ïîääåðæèâàòüñÿ îáà

# openvpn --show-tls|grep 256|grep ECDH|grep ECDSA
TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA
TLS-ECDH-ECDSA-WITH-AES-256-CBC-SHA

Ïîïûòêà ïðîïèñàòü â êîíôèãå

# cat /etc/openvpn/server1/config.ovpn|grep ECDH
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-256-CBC-SHA

ïðèâîäèò ê îøèáêå àâòîðèçàöèè.