Soluce :
in /etc/NetworkManager/system-connections/vpn.nmconnection add
tls-cipher=DEFAULT:@SECLEVEL=0
then
sudo systemctl restart NetworkManager
under “server list” → Custom options
tls-cipher "DEFAULT:@SECLEVEL=0"