Digi TransPort LR54 - Page 322

Web reference OpenVPN client page
Digi TransPort WR Routers User Guide
322
Encryption options
Option Description
Cipher Encryption algorithm or list of algorithms the OpenVPN client can use to encrypt and
decrypt data channel packets. The OpenVPN client accepts the cipher pushed by the
server if it is in this list. If the OpenVPN server supports cipher negotiation, the OpenVPN
client can accept additional ciphers that are not in this list.
Select one or more ciphers: aes-128-cbc, aes-192-cbc, aes-256-cbc, aes-128-gcm, aes-192-
gcm, and aes-256-gcm. The default is aes-256-gcm,aes-256-cbc,aes-192-gcm,aes-192-
cbc,aes-128-gcm,aes-128-cbc.
Digest Digest algorithm the OpenVPN client uses to sign and authenticate data channel packets.
Select one of the following: sha1, sha224, sha256, sha384, or sha512. The default is sha1.
Authentication options
Option Description
Certificate
Authority
(CA)
certificate
CA certificate file this OpenVPN client uses to validate the certificate presented by
the server. See Certificate and key management.
Certificate
Revocation
List (CRL) file
CRL file this OpenVPN client uses to prevent connection to a server that presents a
revoked certificate.
CA/CRL
directory
path (capath)
CA and CRL directory path for this OpenVPN client. You provide multiple CA and CRL
files. Use the c_rehash tool to create CA certificates with a .0 filename extension
and CRLs with a .r0 filename extension.
Certificate Public certificate file for this OpenVPN client. The file is in PEM format.
Private Key
File
Private key file for this OpenVPN client. The file is in PEM format.
Username
Username the OpenVPN client uses to authenticate with the OpenVPN server. A
username is a string up to 32 characters long.
Password
Password the OpenVPN client uses to authenticate with the OpenVPN server. A
password is a string up to 128 characters long.
Confirm
Password
A string of up to 128 characters long that should exactly match the value used for
the password parameter.