Hello!
After installing and configuring openvpn server by using this script
https://github.com/Angristan/OpenVPN-install [nofollow]Can not connect via openvpn client because of an error
Options error: Unrecognized option or missing parameter(s) in client.ovpn:13: tls-version-min (2.3.2)
File Contents client.ovpn
client
proto udp
remote xxx.xxx.xxx.xx 1194
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
auth SHA256
cipher AES-128-CBC
tls-client
tls-version-min 1.2
tls-cipher TLS-DHE-RSA-WITH-AES-128-GCM-SHA256
setenv opt block-outside-dns
verb 3
.....
openvpn --version
OpenVPN 2.3.2 x86_64-pc-linux-gnu [SSL (OpenSSL)] [LZO] [EPOLL] [PKCS11] [eurephia] [MH] [IPv6] built on Dec 1 2014
TLS version
OpenVPN uses TLS 1.0 by default, which is nearly 20 years old.
With tls-version-min 1.2 we use at least TLS 1.2, which the best protocol available currently. I could have used tls-version-min highest but this does not ensure we use TLS 1.2 which is the only secure protocol available.
OpenVPN documentation for tls-version-min
TLS 1.2 is only supported since OpenVPN 2.3.3. This is one of the reasons of the script uses third-party repositories, because some distributions have an older version of OpenVPN.
So my version openvpn does not support TLS 1.2 ? How to upgrade?