On 08/26/2017 02:58 AM, Kurt Roeckx wrote: > openvpn doesn't seem to make use of the > SSL_CTX_set_min_proto_version() function yet. I've attached a > patch that I didn't even try to compile that I think should do the > right thing. > Thanks for this! It now connects fine with the setting 'tls-version-min 1.0' Everything seems to work fine, including the 5 other tunnels on this box.
Perhaps this would be of interest to OpenVPN upstream?