most of my question are already answered by reading in this forum, but "one last thing" is still open.
I am running a OpenVPN server with the following security characters:
SERVER (Raspbian Buster)
CLIENT (iPhone App)
Everything works fine so far and the client can connect. But the missing link is the tls-cipher. With the following cipher my server starts, but the client cannot connect - of course I used the same ciphers for server and client.
The result is the following server status:
TLS error: The server has no TLS ciphersuites in common with the client. Your --tls-cipher setting might be too restrictive.
OpenSSL: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher TLS_ERROR: BIO read tls_read_plaintext error
TLS Error: TLS object -> incoming plaintext read error
TLS Error: TLS handshake failed
I tried some more tls-cipher like
but the server did not start with that configuration.
Which tls-cipher can be used for client and server?