Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have cipher BF-CBC uncommented in both server and client and wireshark is listening to tap0 but it is not showing any encryption. Am I doing something wrong here?

share|improve this question
up vote 4 down vote accepted

OpenVPN is connected in this way:

 [you - tap0-]-- INTERNET --[-tap0 - server ]

The traffic between you and tap0 is unencrypted, the same applies to tap0 <> server. The traffic between both tap0s is encrypted.

tap0 is connected through a physical network adapter, eth0 for wired connections, wlan0 for wireless connections. That would look like this:

 [ YOUR COMPUTER ]--wlan0-- INTERNET --eth0--[ SERVER ]

If you are using a wireless connection, you should listen on wlan0 insteap of tap0 using wireshark. You'll see traffic between UDP ports 1194, which is encrypted.

Don't worry, OpenVPN will use the BF-CBC cipher if the cipher is omitted. Uncommenting it implies using this BF-CBC cipher.

share|improve this answer
Thanks that solves it :) – bonzi Mar 10 '11 at 22:13

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.