Control: tags -1 + confirmed upstreamOpenSSL 3.0 compatibility is part of OpenVPN 2.6, which is supposed to be released next month. See https://community.openvpn.net/openvpn/wiki/StatusOfOpenvpn26 .
If you want to feel free to push this transition ahead, I can either live with temporary removal from testing or I will upload a git snapshot.
