From 597d16d094319cd330ccd7996d1eb8a7ebe1f10f Mon Sep 17 00:00:00 2001
From: Nyr <me@nyr.be>
Date: Sun, 11 Dec 2016 17:03:25 +0100
Subject: [PATCH] Upgrade cipher to AES-128-CBC

Will be the new default starting with OpenVPN 2.4.
---
 openvpn-install.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index 7ca4bf2..6fefa28 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -276,7 +276,7 @@ ifconfig-pool-persist ipp.txt" > /etc/openvpn/server.conf
 		;;
 	esac
 	echo "keepalive 10 120
-cipher AES-128-CBC
+cipher AES-256-CBC
 comp-lzo
 user nobody
 group $GROUPNAME
@@ -369,7 +369,7 @@ nobind
 persist-key
 persist-tun
 remote-cert-tls server
-cipher AES-128-CBC
+cipher AES-256-CBC
 comp-lzo
 setenv opt block-outside-dns
 key-direction 1