From 471f82af26e87b0b310b2a9267a5a32a43497b40 Mon Sep 17 00:00:00 2001
From: Angristan <stanislas.lange@openmailbox.org>
Date: Sun, 13 Mar 2016 14:38:45 +0100
Subject: [PATCH] Using cipher instead of tls-cipher and AES-256-CBC instead of
 AES-128-GCM

---
 openvpn-install-legacy.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/openvpn-install-legacy.sh b/openvpn-install-legacy.sh
index e1f701c..bc1e029 100644
--- a/openvpn-install-legacy.sh
+++ b/openvpn-install-legacy.sh
@@ -232,7 +232,7 @@ ca ca.crt
 cert server.crt
 key server.key
 dh dh.pem
-tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
+cipher AES-256-CBC
 topology subnet
 server 10.8.0.0 255.255.255.0
 ifconfig-pool-persist ipp.txt" > /etc/openvpn/server.conf
@@ -360,7 +360,7 @@ nobind
 persist-key
 persist-tun
 remote-cert-tls server
-tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
+cipher AES-256-CBC
 comp-lzo" > /etc/openvpn/client-common.txt
 	# Generates the custom client.ovpn
 	newclient "$CLIENT"