Gentoo Forums

Code: Select all

Dez 13 22:24:11 gentupe nm-openvpn[129371]: Note: --cipher is not set. OpenVPN versions before 2.5 defaulted to BF-CBC as fallback when cipher negotiation failed in this case. If you need this fallback please add '--data-ciphers-fallback BF-CBC' to your configuration and/or add BF-CBC to --data-ciphers.
Dez 13 22:24:11 gentupe nm-openvpn[129371]: OpenVPN 2.6.14 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [LZ4] [EPOLL] [MH/PKTINFO] [AEAD]
Dez 13 22:24:11 gentupe nm-openvpn[129371]: library versions: OpenSSL 3.5.4 30 Sep 2025, LZO 2.10
Dez 13 22:24:11 gentupe nm-openvpn[129371]: WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Dez 13 22:24:11 gentupe nm-openvpn[129371]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Dez 13 22:24:11 gentupe nm-openvpn[129371]: TCP/UDP: Preserving recently used remote address: [AF_INET]219.100.37.115:443
Dez 13 22:24:11 gentupe nm-openvpn[129371]: Attempting to establish TCP connection with [AF_INET]219.100.37.115:443
Dez 13 22:24:12 gentupe nm-openvpn[129371]: TCP connection established with [AF_INET]219.100.37.115:443
Dez 13 22:24:12 gentupe nm-openvpn[129371]: TCPv4_CLIENT link local: (not bound)
Dez 13 22:24:12 gentupe nm-openvpn[129371]: TCPv4_CLIENT link remote: [AF_INET]219.100.37.115:443
Dez 13 22:24:12 gentupe nm-openvpn[129371]: NOTE: UID/GID downgrade will be delayed because of --client, --pull, or --up-delay
Dez 13 22:24:13 gentupe nm-openvpn[129371]: [opengw.net] Peer Connection Initiated with [AF_INET]219.100.37.115:443
Dez 13 22:24:18 gentupe nm-openvpn[129371]: OPTIONS ERROR: failed to negotiate cipher with server.  Add the server's cipher ('AES-128-CBC') to --data-ciphers (currently 'AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305') if you want to connect to this server.
Dez 13 22:24:18 gentupe nm-openvpn[129371]: ERROR: Failed to apply push options

Code: Select all

###############################################################################
# The encryption and authentication algorithm.
# 
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
# 
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC
#  auth:   SHA SHA1 MD5 MD4 RMD160

#cipher AES-128-CBC
data-ciphers AES-256-GCM:AES-128-GCM:?CHACHA20-POLY1305
auth SHA1

Code: Select all

OPTIONS ERROR: failed to negotiate cipher with server.  [b]Add[/b] the server's cipher ('[b]AES-128-CBC[/b]') to --data-ciphers ....

Code: Select all

#cipher AES-128-CBC
#data-ciphers AES-128-CBC:AES-256-GCM:AES-128-GCM:?CHACHA20-POLY1305
data-ciphers AES-128-CBC