diff --git a/README.rst b/README.rst
index 7ac66c9aa39741d39501008ac40e8ee29f96f62c..99cbec35adf1d8baad2a11a31ebc615da367db92 100644
--- a/README.rst
+++ b/README.rst
@@ -54,7 +54,7 @@ Requirements
 
 - Python 2.7
 - OpenSSL binary and development libraries
-- OpenVPN >= 2.4
+- OpenVPN 2.4.*
 - Babel_ (with Nexedi patches)
 - geoip2: `python library`_ and `country lite database`_ (optional)
 - python-miniupnpc for UPnP support (optional)
diff --git a/debian/control b/debian/control
index 9f5d963dc2ba8f6a78b8c27648826f635594c0f7..cd3e922497c0e94a554a81fd6c1d0488acf0f6be 100644
--- a/debian/control
+++ b/debian/control
@@ -8,7 +8,7 @@ X-Python-Version: >= 2.7
 
 Package: re6stnet
 Architecture: all
-Depends: ${misc:Depends}, ${python:Depends}, python-pkg-resources, python-openssl (>= 0.13), openvpn (>= 2.4), babeld (= 1.9.1+hmac-nxd2), iproute2 | iproute, openssl
+Depends: ${misc:Depends}, ${python:Depends}, python-pkg-resources, python-openssl (>= 0.13), openvpn (>= 2.4), openpvn (<< 2.5~), babeld (= 1.9.1+hmac-nxd2), iproute2 | iproute, openssl
 Recommends: ${python:Recommends}, logrotate
 Suggests: ${python:Suggests}, ndisc6
 Conflicts: re6st-node
diff --git a/re6stnet.spec b/re6stnet.spec
index dc987765d6dce657907a0af53674fbf1f3037baa..ef6a26eb7fb0c9cbb8575a2e09e7200e457bf037 100644
--- a/re6stnet.spec
+++ b/re6stnet.spec
@@ -13,6 +13,7 @@ Requires:   babeld = 1.6.2-nxd1
 Requires:   iproute
 Requires:   openssl
 Requires:   openvpn >= 2.4
+Requires:   openvpn < 2.5
 Requires:   python >= 2.7
 Requires:   pyOpenSSL >= 0.13
 Requires:   python-setuptools