OPENWRT 连接OPENvirtual**求助

xxj737

OPENWRT上连接的OPENvirtual** 客户端，但日志中总有两条错误，不知啥意思



是不是要加将加密方式'BF-CBC' 改成这里面的一种  (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305)


cipher set to 'BF-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). Openvirtual** ignores --cipher for cipher negotiations.


WARNING: No server certificate verification method has been enabled.  See http://openvirtual**.net/howto.html#mitm for more info.




hu Mar  6 11:24:28 2025 daemon.notice netifd: Interface 'ovirtual**' is setting up nowThu Mar  6 11:24:28 2025 daemon.notice openvirtual**(ikuai)[6009]: net_iface_up: set tun0 upThu Mar  6 11:24:28 2025 daemon.notice openvirtual**(ikuai)[6009]: net_addr_v4_add: 10.7.7.3/24 dev tun0Thu Mar  6 11:24:28 2025 daemon.notice openvirtual**(ikuai)[6009]: /usr/libexec/openvirtual**-hotplug up ikuai tun0 1400 0 10.7.7.3 255.255.255.0 initThu Mar  6 11:24:28 2025 daemon.notice netifd: Interface 'ovirtual**' is now upThu Mar  6 11:24:28 2025 daemon.notice netifd: Network device 'tun0' link is upThu Mar  6 11:24:28 2025 daemon.notice netifd: Interface 'ovirtual**' has link connectivityThu Mar  6 11:24:28 2025 daemon.notice openvirtual**(ikuai)[6009]: Initialization Sequence CompletedThu Mar  6 11:24:29 2025 daemon.notice openvirtual**(ikuai)[6009]: Data Channel: cipher 'AES-256-GCM', peer-id: 2, compression: 'lzo'Thu Mar  6 11:24:29 2025 daemon.notice openvirtual**(ikuai)[6009]: Timers: ping 10, ping-restart 60Thu Mar  6 11:24:29 2025 user.notice firewall: Reloading firewall due to ifup of ovirtual** (tun0)Thu Mar  6 11:25:56 2025 daemon.notice wpa_supplicant[1373]: phy1-sta0: CTRL-EVENT-BEACON-LOSSThu Mar  6 11:27:22 2025 daemon.warn odhcpd[1552]: No default route present, overriding ra_lifetime to 0!Thu Mar  6 11:27:39 2025 daemon.notice openvirtual**(ikuai)[6009]: [iKuai Openvirtual** Server] Inactivity timeout (--ping-restart), restartingThu Mar  6 11:27:39 2025 daemon.notice openvirtual**(ikuai)[6009]: SIGUSR1[soft,ping-restart] received, process restartingThu Mar  6 11:27:39 2025 daemon.notice openvirtual**(ikuai)[6009]: Restart pause, 1 second(s)Thu Mar  6 11:27:40 2025 daemon.warn openvirtual**(ikuai)[6009]: WARNING: No server certificate verification method has been enabled.  See http://openvirtual**.net/howto.html#mitm for more info.Thu Mar  6 11:27:40 2025 daemon.warn openvirtual**(ikuai)[6009]: NOTE: the current --script-security setting may allow this configuration to call user-defined scriptsThu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: TCP/UDP: Preserving recently used remote address: [AF_INET]14.246:1194Thu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: Socket Buffers: R=[180224->180224] S=[180224->180224]Thu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: UDPv4 link local: (not bound)Thu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: UDPv4 link remote: [AF_INET]14.246:1194Thu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: TLS: Initial packet from [AF_INET]14.246:1194, sid=83d88944 5Thu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: VERIFY OK: depth=1, C=CN, O=iKuai, CN=iKuai Device CAThu Mar  6 11:27:40 2025 daemon.notice openvirtual**(ikuai)[6009]: VERIFY OK: depth=0, C=CN, O=iKuai, CN=iKuai Openvirtual** ServerThu Mar  6 11:27:41 2025 daemon.notice openvirtual**(ikuai)[6009]: Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384, peer certificate: 2048 bits RSA, signature: RSA-SHA256, peer temporary key: 256 bits ECprime256v1Thu Mar  6 11:27:41 2025 daemon.notice openvirtual**(ikuai)[6009]: [iKuai Openvirtual** Server] Peer Connection Initiated with [AF_INET]14.153.140.246:1194Thu Mar  6 11:27:41 2025 daemon.notice openvirtual**(ikuai)[6009]: TLS: move_session: dest=TM_ACTIVE src=TM_INITIAL reinit_src=1Thu Mar  6 11:27:41 2025 daemon.notice openvirtual**(ikuai)[6009]: TLS: tls_multi_process: initial untrusted session promoted to trustedThu Mar  6 11:27:42 2025 daemon.notice openvirtual**(ikuai)[6009]: SENT CONTROL [iKuai Openvirtual** Server]: 'PUSH_REQUEST' (status=1)Thu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: PUSH: Received control message: 'PUSH_REPLY,route 192.168.50.0 255.255.255.0,route 10.1.0.0 255.255.0.0,route 192.168.0.0 255.255.0.0,route 10.7.0.0 255.255.0.0,route-gateway 10.7.7.1,topology subnet,ping 10,ping-restart 60,ifconfig 10.7.7.3 255.255.255.0,peer-id 0,cipher AES-256-GCM'Thu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: OPTIONS IMPORT: --ifconfig/up options modifiedThu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: OPTIONS IMPORT: route options modifiedThu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: OPTIONS IMPORT: route-related options modifiedThu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: Preserving previous TUN/TAP instance: tun0Thu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: Initialization Sequence CompletedThu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: Data Channel: cipher 'AES-256-GCM', peer-id: 0, compression: 'lzo'Thu Mar  6 11:27:43 2025 daemon.notice openvirtual**(ikuai)[6009]: Timers: ping 10, ping-restart 60Thu Mar  6 11:32:09 2025 daemon.warn odhcpd[1552]: No default route present, overriding ra_lifetime to 0!