Re: Compatibility from openvpn 2.4 to 2.7

--===============2326703616743744348==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="Q70DQ6LmHP+iDIni"
Content-Disposition: inline


--Q70DQ6LmHP+iDIni
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

On Fri, Oct 17, 2025 at 11:19:48AM +0200, Simon Matter wrote:
> Looks like "update-crypto-policies --set LEGACY" did the trick to make it
> work. Ar least this makes the errors go away in a test setup. I'll soon do
> it on a production system.

Ah, Redhat...  "why should we leave decisions to software when we can
annoy everbody with a global setting".

(I'm not exactly sure how these crypto policies work, but they seem to
override the application's request to get "--tls-cert-profile insecure")

thanks for reporting back the solution ;-)

gert
--=20
"If was one thing all people took for granted, was conviction that if you=
=20
 feed honest figures into a computer, honest figures come out. Never doubte=
d=20
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistre=
ss

Gert Doering - Munich, Germany                             [email protected]=
=2Ede

--Q70DQ6LmHP+iDIni
Content-Type: application/pgp-signature; name=signature.asc

-----BEGIN PGP SIGNATURE-----
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=hyfE
-----END PGP SIGNATURE-----

--Q70DQ6LmHP+iDIni--


--===============2326703616743744348==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


--===============2326703616743744348==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

--===============2326703616743744348==--