OpenVPN / OpenVPN/openvpn

OpenVPN Client: Config issue when "cipher AES-256-GCM" is used and also "dhcp-option DOMAIN-SEARCH xyz.com" is specified

Open
#705 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Windows
Dominant language
C
Stars
14.6k
Forks
3.4k
PR merge metrics
No merged PRs in 30d

Description

Config issue when "cipher AES-256-GCM" is used and also "dhcp-option DOMAIN-SEARCH xyz.com" is specified in the configuration file for OpenVPN client.

Error message in the Logfile:
Options error: Some --dhcp-option or --dns options require DHCP server, which is not supported by the selected ovpn-dco driver
Use --help for more information.

When i change option cipher to AES-256-CBC, everyting is working.

OpenVPN-2.6.13-I002-amd64 on Windows (10/11).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Reproduce the configuration on Windows 10/11 with OpenVPN 2.6.13, using AES-256-GCM together with dhcp-option DOMAIN-SEARCH xyz.com. Compare the behavior with AES-256-CBC and inspect the handling of --dhcp-option, --dns, and the selected ovpn-dco driver. Done means the reported configuration works without the DHCP-server options error, or the limitation is clearly documented.

Written by the indexing model from the issue text.

Assessment

Domain
networking, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.