Arne Schwabe a38a377fd5 Include Chacha20-Poly1305 into default --data-ciphers when available ...

Most TLS 1.3 libraries inlcude the Chacha20-Poly1305 based cipher suite
beside the AES-GCM based ones int he list of default ciphers suites.
Chacha20-Poly1305 is accepted as good alternative AEAD algorithm to the
AES-GCM algorithm by crypto community.

Follow this and include Chacha20-Poly1305 by default in data-ciphers
when available. This makes picking Chacha20-Poly1305 easier as it only
requires to change server (by changing priority) or client side (removing
AES-GCM from data-ciphers) to change to Chacha20-Poly1305.

Signed-off-by: Arne Schwabe <arne@rfc2549.org>
Acked-by: Antonio Quartulli <antonio@openvpn.net>
Message-Id: <20210818213354.687736-2-arne@rfc2549.org>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg22745.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>

2021-09-07 17:29:11 +02:00

..

advanced-options.rst

Fix best gateway selection over netlink

2020-09-10 11:15:01 +02:00

cipher-negotiation.rst

Include Chacha20-Poly1305 into default --data-ciphers when available

2021-09-07 17:29:11 +02:00

client-options.rst

Implement auth-token-user

2021-06-15 15:53:20 +02:00

connection-profiles.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

encryption-options.rst

Implement tls-groups option to specify eliptic curves/groups

2020-07-21 22:33:58 +02:00

example-fingerprint.rst

Add detailed man page section to setup a OpenVPN setup with peer-fingerprint

2021-08-01 19:47:44 +02:00

examples.rst

Document the simple self-signed certificate setup in examples

2021-03-22 11:19:35 +01:00

generic-options.rst

Require at least 100MB of mlock()-able memory if --mlock is used.

2021-03-11 17:42:59 +01:00

inline-files.rst

Implement peer-fingerprint to check fingerprint of peer certificate

2021-03-21 19:45:43 +01:00

link-options.rst

Remove inetd support from OpenVPN

2021-01-30 11:03:40 +01:00

log-options.rst

Remove inetd support from OpenVPN

2021-01-30 11:03:40 +01:00

management-options.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

network-config.rst

doc/man: Documentation for --bind-dev / VRFs on Linux

2020-07-17 12:58:58 +02:00

pkcs11-options.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

plugin-options.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

protocol-options.rst

Include Chacha20-Poly1305 into default --data-ciphers when available

2021-09-07 17:29:11 +02:00

proxy-options.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

renegotiation.rst

Man page sections corrections

2021-01-20 07:53:52 +01:00

script-options.rst

Implement deferred auth for scripts

2021-04-28 14:03:55 +02:00

server-options.rst

Cleanup handling of initial auth token

2021-07-28 12:17:13 +02:00

signals.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00

tls-options.rst

Deprecate the --verify-hash option

2021-03-22 11:25:25 +01:00

unsupported-options.rst

Remove --no-iv

2020-07-18 10:58:33 +02:00

virtual-routing-and-forwarding.rst

doc/man: Documentation for --bind-dev / VRFs on Linux

2020-07-17 12:58:58 +02:00

vpn-network-options.rst

Add parsing of dhcp-option PROXY_HTTP

2021-04-18 16:19:58 +02:00

windows-options.rst

doc/man: convert openvpn.8 to split-up .rst files

2020-07-17 11:23:18 +02:00