Re: [Openvpn-devel] [PATCH 6/7] set TLS 1.2 as minimum by default

2021-09-13 Thread Antonio Quartulli
Hi, On 13/09/2021 14:39, Gert Doering wrote: > Hi, > > On Sat, Sep 04, 2021 at 11:56:28AM +0200, Antonio Quartulli wrote: >> diff --git a/src/openvpn/options.c b/src/openvpn/options.c >> index f2fb6d64..6f6eb73d 100644 >> --- a/src/openvpn/options.c >> +++ b/src/openvpn/options.c >> @@ -850,6 +85

Re: [Openvpn-devel] [PATCH 6/7] set TLS 1.2 as minimum by default

2021-09-13 Thread Gert Doering
Hi, On Sat, Sep 04, 2021 at 11:56:28AM +0200, Antonio Quartulli wrote: > diff --git a/src/openvpn/options.c b/src/openvpn/options.c > index f2fb6d64..6f6eb73d 100644 > --- a/src/openvpn/options.c > +++ b/src/openvpn/options.c > @@ -850,6 +850,7 @@ init_options(struct options *o, const bool init_gc

Re: [Openvpn-devel] [PATCH 6/7] set TLS 1.2 as minimum by default

2021-09-06 Thread Arne Schwabe
Am 04.09.21 um 11:56 schrieb Antonio Quartulli: > Do not accept handshakes with peers trying to negotiate TLS lower than 1.2. > TLS 1.1 and 1.0 are not recommended and therefore will, by default, > allow TLS 1.2 as minimum version. > > The minimum allowed version can still be controlled via > '--t