A
Consider remove TLS 1.0/1.1, and recommend using TLS 1.3, if not possible for now, mark TLS 1.0/1.1 as insecure, remove TLS 1.0/1.1 in the future.
TinCanTech
Use --tls-version-min and --tls-version-max
A
Sorry, I'm just a user, I using OpenVPN connect, doesn't operate any server. I mean mark TLS 1.0/1.1 as insecure, the same as compression, so that VPN administrators and users will avoid using TLS 1.0/1.1 gradually. The goal is stop using TLS 1.0/1.1 in the future.