diff --git a/CHANGELOG.md b/CHANGELOG.md
index 7e03b8bf..01240c44 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -26,6 +26,7 @@ The **patch** part changes is incremented if multiple releases happen the same m
 * elasticsearch : use logrotate for garbage collector logs instead of breaking compression cron
 * docker-host: fix type in daemon.json and remove host configuration that is already in the systemd service by default
 * haproxy: fix missing admin ACL in stats module access permissions
+* openvpn: fix the client cipher configuration to match the server cipher configuration
 
 ### Removed
 
diff --git a/openvpn/templates/ovpn.conf.j2 b/openvpn/templates/ovpn.conf.j2
index d1b3c214..f65d43fd 100644
--- a/openvpn/templates/ovpn.conf.j2
+++ b/openvpn/templates/ovpn.conf.j2
@@ -9,5 +9,5 @@ nobind
 persist-key
 persist-tun
 
-cipher AES-256-CBC
+cipher AES-256-GCM