From 0ac534115a195b2c5614035dc5671565a23a4fde Mon Sep 17 00:00:00 2001
From: Angristan <stanislas.lange@openmailbox.org>
Date: Tue, 8 Mar 2016 17:40:22 +0100
Subject: [PATCH] Use real encryption : AES-256-CBC

---
 openvpn-install.sh | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/openvpn-install.sh b/openvpn-install.sh
index 6699817..31a87c4 100644
--- a/openvpn-install.sh
+++ b/openvpn-install.sh
@@ -230,6 +230,7 @@ ca ca.crt
 cert server.crt
 key server.key
 dh dh.pem
+cipher AES-256-CBC
 topology subnet
 server 10.8.0.0 255.255.255.0
 ifconfig-pool-persist ipp.txt" > /etc/openvpn/server.conf
@@ -357,7 +358,8 @@ nobind
 persist-key
 persist-tun
 remote-cert-tls server
-comp-lzo" > /etc/openvpn/client-common.txt
+comp-lzo
+cipher AES-256-CBC" > /etc/openvpn/client-common.txt
 	# Generates the custom client.ovpn
 	newclient "$CLIENT"
 	echo ""