From 6675b6fd51389db6ad5b4f7f1dcd3d04725d0daa Mon Sep 17 00:00:00 2001
From: Joerg Lehmann <joerg.lehmann@nbit.ch>
Date: Wed, 9 Nov 2022 17:27:58 +0100
Subject: [PATCH] same cipher settings for tls/443

---
 config/server-443.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/config/server-443.conf b/config/server-443.conf
index bcd37fe..b68579f 100644
--- a/config/server-443.conf
+++ b/config/server-443.conf
@@ -9,7 +9,10 @@ script-security 3
 writepid /var/run/openvpn-server/myopenvpn-443.pid
 
 ; ciphers
-tls-cipher "DEFAULT"
+tls-cipher "DEFAULT:@SECLEVEL=0"
+tls-version-min 1.0
+providers legacy default
+data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:BF-CBC
 
 ; tunnel configuration
 dev tap1