search

angristan / openvpn-install

Set up your own OpenVPN server on Debian, Ubuntu, Fedora, CentOS or Arch Linux.
https://stanislas.blog
MIT License
13.51k stars 2.95k forks source link

What is "Consider setting groups/curves preference with tls-groups instead of forcing a specific curve with ecdh-curve." ? #1231

Open emoxam opened 3 months ago

emoxam commented 3 months ago

What is "Consider setting groups/curves preference with tls-groups instead of forcing a specific curve with ecdh-curve." ? I see it at the log. Thanks

yeezy69 commented 3 months ago

I think you should use for example

tls-ciphersuites TLS_AES_256_GCM_SHA384

instead of

ecdh-curve secp521r1

in your tunnel-config.