I'm currently using the
-tls-cipher command on server to only allow the cipher I want (
TLS-DHE-RSA-WITH-AES-256-GCM-SHA384) but there is the command
-cipher too, and OpenVPN's man page is not really clear with the differences between them. Googling also returned no useful information. Many websites also tell me I should use the two too but don't say why, I wanted to check here first.
Do I need to use
-cipher to make sure I only use
AES-256-GCM to encrypt the connection?
I'm on OpenVPN 2.3.