openvpn breaks with Ubuntu 21 LTS after an update

you need to add:

tls-cipher "DEFAULT:@SECLEVEL=0"
remote-cert-tls server

to your config.vpn

The log line of the daemon looks like that:

2022-04-25 08:19:22 OpenSSL: error:0A00018E:SSL routines::ca md too weak

It is a downgrade of the security and should only be used for Corpex connections!

Keywords: ssl openvpn ubuntu