title: How do I manage the error "OpenSSL v1.1.1 ssl_choose_client_version unsupported protocol"?
body: <p>While trying to connect to a VPN via <code>openvpn</code> I get the following error from <code>openssl</code></p>
  <pre><code>Tue Oct 30 11:34:16 2018 WARNING: --ns-cert-type is DEPRECATED.  Use --remote-cert-tls instead.
  ... several more lines
  Tue Oct 30 11:34:17 2018 OpenSSL: error:1425F102:SSL routines:ssl_choose_client_version:unsupported protocol
  Tue Oct 30 11:34:17 2018 TLS_ERROR: BIO read tls_read_plaintext error
  Tue Oct 30 11:34:17 2018 TLS Error: TLS object -&gt; incoming plaintext read error
  Tue Oct 30 11:34:17 2018 TLS Error: TLS handshake failed
  Tue Oct 30 11:34:17 2018 SIGUSR1[soft,tls-error] received, process restarting
  Tue Oct 30 11:34:17 2018 Restart pause, 5 second(s)
  </code></pre>
  <p>This error does not arise when using OpenSSL 1.1.0h.</p>
  <ul>
  <li>Why does this error arise after upgrading the <code>openssl</code> libraries?</li>
  <li>How do I manage around this recurring problem?</li>
  <li>Is there a way to make this work by giving some flags to <code>openvpn</code> CLI instead of downgrading <code>openssl</code>?</li>
  </ul>
  <p>OS: Debian Sid</p>