create client configs with stronger encryption

Signed-off-by: shammash <shammash@autistici.org>

create client configs with stronger encryption
Signed-off-by: shammash <shammash@autistici.org>
08679816 · shammash · e15a1131 · 08679816
Commit 08679816 authored Jan 03, 2017 by shammash
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 0 deletions

autovpn/vpn_app.py autovpn/vpn_app.py +4 -0

No files found.
--- a/autovpn/vpn_app.py
+++ b/autovpn/vpn_app.py
@@ -45,6 +45,10 @@ key %(cn)s.key
 crl-verify crl.pem
 ns-cert-type server
 tls-auth tlsauth.key 1
+auth SHA512
+cipher AES-256-CBC
+tls-version-min 1.2 or-highest
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384
 '''

 TBLK_PLIST_TEMPLATE = '''<?xml version="1.0" encoding="UTF-8"?>