OpenVPN client reports weak hash

[bartgrefte]

Since PiVPN is not usable for nftables users, I tried the Webmin-alternative. Couldn't get it to work, threw an error during the generation of certificates.

So I tried this (updated) one, I managed to get as far as obtaining a config for a client, only OpenVPN for Android won't connect to the server because the certificate is too weak, followed by "cannot load inline certificate file".
The log also throws other (warning)messages:

WARNING: Compression for receiving enabled. Compression has been used in the past to break encryption. Sent packets are not compressed unless "allow-compression yes" is also set.

DEPRECATED OPTION: --cipher set to 'AES-128-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM:CHACHA20-POLY1305). OpenVPN ignores --cipher for cipher negotiations. 

WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.

OpenSSL: error:0A00018E:SSL routines::ca md too weak:
OpenSSL reported a certificate with a weak hash, please see the in app FAQ about weak hashes.
MGMT: Got unrecognized command>FATAL:Cannot load inline certificate file
MANAGEMENT: Client disconnected
Cannot load inline certificate file
Exiting due to fatal error
Process exited with exit value 1
Unscheduling VPN keep alive

I think this addon could use another update ;) , thanks for keeping the development of https://www.webmin.com/cgi-bin/search_third.cgi?search=openvpn alive :)