4 ms·

The OpenVPN section is misleading. The dh option is only supported on the server side. If you try to use it on the client side (which is what this guide appea

by agwa 11y ago

The OpenVPN section is misleading. The dh option is only supported on the server side. If you try to use it on the client side (which is what this guide appears to be tailored towards) it will be ignored and you'll use whatever DH parameters the server provides.

tikums 11y ago
It may be misleading but also in the sense that there's no recommendation to just drop VPN altogether. How about we just stop relying on terribly over-designed protocols such as VPN and IPSec? Complexity is the enemy of security.
- DiabloD3 11y ago
  We use OpenVPN at work to provide layer 2 access to a management network that uses a /24 out of the 10/8 range. How else do you think we should do this?
  - tikums 11y ago
    MinimaLT http://cr.yp.to/tcpip/minimalt-20130522.pdf http://cr.yp.to/tcpip/minimalt-20130522.pdf
diafygi 11y ago
How can I tell what DH size I'm using from the OpenVPN client side when I connect to an OpenVPN server?