use newer server cert to get rif of @SECLEVEL=0 (at least try if it works)

config/server-443.conf

@@ -9,7 +9,7 @@ script-security 3
 writepid /var/run/openvpn-server/myopenvpn-443.pid
 
 ; ciphers
-tls-cipher "DEFAULT:@SECLEVEL=0"
+tls-cipher "DEFAULT"
 
 ; tunnel configuration
 dev tap1

config/server.conf

@@ -9,7 +9,7 @@ script-security 3
 writepid /var/run/openvpn-server/myopenvpn.pid
 
 ; ciphers
-tls-cipher "DEFAULT:@SECLEVEL=0"
+tls-cipher "DEFAULT"
 
 ; tunnel configuration
 dev tap0
@@ -38,8 +38,8 @@ management localhost 6666
 ; certificates and authentication
 dh   /opt/openvpn/private/dh2048.pem
 ca   /opt/openvpn/ca/cacert.pem
-cert /opt/openvpn/certs/hostcert.pem
-key  /opt/openvpn/private/hostkey.pem
+cert /opt/openvpn/certs/ewon.rychiger.com-cert.pem
+key  /opt/openvpn/private/ewon.rychiger.com-key.pem
 verify-client-cert none
 username-as-common-name
 auth-user-pass-verify /opt/openvpn/scripts/openvpn-auth.py via-env