diff options
| author | Kali Kaneko (leap communications) <kali@leap.se> | 2019-01-24 19:29:02 +0100 |
|---|---|---|
| committer | Kali Kaneko (leap communications) <kali@leap.se> | 2019-01-29 16:54:23 +0100 |
| commit | 3c57a988b0088e953a8b623941c2d3a91dbcca6a (patch) | |
| tree | f00ecf7de4e7167c84e8bb4768f92bddcf41d12f | |
| parent | 2445ac94205c93187f4f8d1c3901d7f84e212dfb (diff) | |
[bug] allow tls 1.0 as a workaround for buster/sid
in systems with newer openssl, tls 1.0 has been disabled.
however, this breaks the ability of a client in a newer system to
connect with the openvpn servers on providers that are still on stretch.
platform needs to be upgraded.
-Related: #105
| -rw-r--r-- | pkg/helper/args.go | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/pkg/helper/args.go b/pkg/helper/args.go index d6b3bb4..1a5bd3b 100644 --- a/pkg/helper/args.go +++ b/pkg/helper/args.go @@ -23,6 +23,7 @@ var ( "--remote-cert-tls", "server", "--dhcp-option", "DNS", nameserver, "--log", LogFolder + "openvpn.log", + "--tls-version-min", "1.0", } allowendArgs = map[string][]string{ |