On 25-09-18 14:48, Arne Schwabe wrote: > + "If your client is 2.3.6 or older consider adding > tls-version 1.1" > + "to the the configuration to use TLS 1.1+ instead of TLS > 1.0 only");
Don't you mean "adding tls-version-min 1.0 to the configuration to use TLS 1.0+ instead of TLS 1.0 only." ? Note both the -min postfix, and the use of 1.0 instead of 1.1. I'd expect that people that have such old clients around might even have pre-2.3.2 clients, which only support TLS 1.0. Those would not work when setting tls-version-min 1.1 at the other end. -Steffan _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel