Hi,
On 13/09/2021 14:39, Gert Doering wrote:
> Hi,
>
> On Sat, Sep 04, 2021 at 11:56:28AM +0200, Antonio Quartulli wrote:
>> diff --git a/src/openvpn/options.c b/src/openvpn/options.c
>> index f2fb6d64..6f6eb73d 100644
>> --- a/src/openvpn/options.c
>> +++ b/src/openvpn/options.c
>> @@ -850,6 +85
Hi,
On Sat, Sep 04, 2021 at 11:56:28AM +0200, Antonio Quartulli wrote:
> diff --git a/src/openvpn/options.c b/src/openvpn/options.c
> index f2fb6d64..6f6eb73d 100644
> --- a/src/openvpn/options.c
> +++ b/src/openvpn/options.c
> @@ -850,6 +850,7 @@ init_options(struct options *o, const bool init_gc
Am 04.09.21 um 11:56 schrieb Antonio Quartulli:
> Do not accept handshakes with peers trying to negotiate TLS lower than 1.2.
> TLS 1.1 and 1.0 are not recommended and therefore will, by default,
> allow TLS 1.2 as minimum version.
>
> The minimum allowed version can still be controlled via
> '--t
Do not accept handshakes with peers trying to negotiate TLS lower than 1.2.
TLS 1.1 and 1.0 are not recommended and therefore will, by default,
allow TLS 1.2 as minimum version.
The minimum allowed version can still be controlled via
'--tls-version-min'.
At the same time automatically set '--tls-