Use better cipher

1 files changed, 1 insertions, 0 deletions

diff --git a/Generate b/Generate
index 25ead46..6e1b836 100755
--- a/Generate
+++ b/Generate
@@ -685,6 +685,7 @@ hostlist.each{ |host|
 		else
 			conffile.puts "tls-client"
 		end
+		conffile.puts "cipher AES-256-CBC"
 		if host['openvpn_ge_23']
 			conffile.puts "verify-x509-name \"%s%s.%s\""%[$config['x509nameprefix'], peer['name'], $config['cadndomain']]
 		else