New comment by travankor on void-packages repository https://github.com/void-linux/void-packages/pull/23429#issuecomment-656906045 Comment: `mbedtls` is officially supported by openvpn. This should be 100% interoperable with other openvpn instances. (Some trivia: This version of openvpn was sponsored by the Dutch government for their restricted communication channels.) The features that don't work compared to the openssl build: ``` * PKCS#12 file support * --capath support - Loading certificate authorities from a directory * Windows CryptoAPI support * X.509 alternative username fields (must be "CN") ``` This is why the `mbedtls` and `pkcs12` options conflict since the build fails with both turned on. --- Admittedly, I don't know the reason why libressl is causing problems and to what extent things are broken with openvpn. And yes, I tested protonovpn, which seems to work.