OpenSSL v1.1.1 ssl_choose_client_version unsupported protocol [closed]

Answer 1

You can even directly override the system default e.g. by using:

tls-cipher "DEFAULT:@SECLEVEL=1"

to have a basic configuration that matches normal OpenSSL defaults. Note that OpenVPN normally sets a more restricted cipher list (see man page).