OpenVPN throws a "signature digest algorithm too weak" error when I try to connect to a specific VPN.
A common suggestion for a workaround is using the following config:
This works, but I was unable to find any documentation about what
SECLEVEL does. Does it just allow the less-secure cipher the VPN server offers? Or does it allow any cipher (eg also null cipher) or does it otherwise lead to a complete compromise of security?