ar 28 10:53:33 MI-3: starting OpenVPN client...
Mar 28 10:53:33 openvpn-cli[28570]: WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.
Mar 28 10:53:33 openvpn-cli[28570]: DEPRECATED OPTION: ncp-disable. Disabling cipher negotiation is a deprecated debug feature that will be removed in OpenVPN 2.6
Mar 28 10:53:33 openvpn-cli[28570]: DEPRECATED OPTION: --cipher set to \'BF-CBC\' but missing in --data-ciphers (CHACHA20-POLY1305:AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add \'BF-CBC\' to --data-ciphers or change --cipher \'BF-CBC\' to --data-ciphers-fallback \'BF-CBC\' to silence this warning.
Mar 28 10:53:33 openvpn-cli[28622]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 28 10:53:33 openvpn-cli[28622]: WARNING: INSECURE cipher (BF-CBC) with block size less than 128 bit (64 bit). This allows attacks like SWEET32. Mitigate by using a --cipher with a larger block size (e.g. AES-256-CBC). Support for these insecure ciphers will be removed in OpenVPN 2.6. |