From 96295968a2f68b9a6a5f19f3ee10bed8fc2b0497 Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Mon, 2 Jan 2017 11:09:58 +0100
Subject: Use better cipher

---
 Generate | 1 +
 1 file changed, 1 insertion(+)

diff --git a/Generate b/Generate
index 25ead46..6e1b836 100755
--- a/Generate
+++ b/Generate
@@ -685,6 +685,7 @@ hostlist.each{ |host|
 		else
 			conffile.puts "tls-client"
 		end
+		conffile.puts "cipher AES-256-CBC"
 		if host['openvpn_ge_23']
 			conffile.puts "verify-x509-name \"%s%s.%s\""%[$config['x509nameprefix'], peer['name'], $config['cadndomain']]
 		else
-- 
cgit v1.2.3