When I try connecting to my OpenVPN server , the log on OpenVPN software is a bit confusing .
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 19 04:16:29 2021 Data Channel Decrypt: Cipher 'BF-CBC' initialized with 128 bit key
Fri Nov 19 04:16:29 2021 Data Channel Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Fri Nov 19 04:16:29 2021 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA, 1024 bit RSA
Is the data being encrypted in DHE-RSA-AES256-SHA ?
Here is my client .ovpn file content :
persist-key
persist-tun
resolv-retry infinite
nobind
pull
verb 3
auth-user-pass
here is my server.conf file on the VPS :
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
reneg-sec 0
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
#plugin /usr/lib64/openvpn/plugin/lib/openvpn-auth-pam.so /etc/pam.d/login #- Comment this line if you are using FreeRADIUS
#plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf #- Uncomment this line if you are using FreeRADIUS
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
persist-key
persist-tun
status 1194.log
verb 3
plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
so my question is : " what encryption method is being used here ? "
I see :
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: **Cipher 'BF-CBC' initialized with 128 bit key**
Fri Nov 19 04:16:29 2021 Data Channel Encrypt: Using 160 bit message hash 'SHA1' for HMA
and then :
Control Channel: TLSv1, cipher TLSv1/SSLv3 **DHE-RSA-AES256-SHA**, 1024 bit RSA
I want to use the lowest encryption method possible as I want higher speed and less data usage . If there is anyway I can improve the speed and have a faster connection , please let me know .
BTW , OpenVPN server version is 2.4.11 .