On 25-09-18 14:48, Arne Schwabe wrote:
> +                 "If your client is 2.3.6 or older  consider adding 
> tls-version 1.1"
> +                 "to the the configuration to use TLS 1.1+ instead of TLS 
> 1.0 only");

Don't you mean "adding tls-version-min 1.0 to the configuration to use
TLS 1.0+ instead of TLS 1.0 only." ?

Note both the -min postfix, and the use of 1.0 instead of 1.1.  I'd
expect that people that have such old clients around might even have
pre-2.3.2 clients, which only support TLS 1.0.  Those would not work
when setting tls-version-min 1.1 at the other end.

-Steffan


_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel

Reply via email to