Manual page update for Re-enabled TLS version negotiation.

Signed-off-by Matthias Andree <[email protected]...>

---
  doc/openvpn.8 | 13 ++++++++-----
  1 file changed, 8 insertions(+), 5 deletions(-)

doc/openvpn.8 +8 -5

index a95d353..1420bdd 100644
@@ -4286,16 +4286,19 @@ include "1.0", "1.1", or "1.2".  If 'or-highest' is specified
  and version is not recognized, we will only accept the highest TLS
  version supported by the local SSL implementation.
 
-If this options is not set, the code in OpenVPN 2.3.4 will default
-to using TLS 1.0 only, without any version negotiation.  This reverts
-the beaviour to what OpenVPN versions up to 2.3.2 did, as it turned
-out that TLS version negotiation can lead to handshake problems due
-to new signature algorithms in TLS 1.2.
+Also see
+.B \-\-tls-version-max
+below, for information on compatibility.
  .\"*********************************************************
  .TP
  .B \-\-tls-version-max version
  Set the maximum TLS version we will use (default is the highest version
  supported).  Examples for version include "1.0", "1.1", or "1.2".
+
+If and only if this is set to 1.0, and OpenSSL is used (not PolarSSL),
+then OpenVPN will set up OpenSSL to use a fixed TLSv1 handshake. All
+other configurations will autonegotiate in the given limits, and the
+choice of handshake versions is left to the SSL implementation.
  .\"*********************************************************
  .TP
  .B \-\-pkcs12 file