diff --git a/images/common/utils.sh b/images/common/utils.sh
index 5e15119b..a3b9084e 100644
--- a/images/common/utils.sh
+++ b/images/common/utils.sh
@@ -237,5 +237,5 @@ function openvpn_config_download {
 
 function crl_download {
 	export CAid=$(psql -qAtc "SELECT ca_id FROM config_vpn where name='${VPN_NAME}';")
-	wget -qO revoked.crl --no-check-certificate ${DASHBOARD_INTERNAL}/admin/pki/ca/${CAid}.crl
+	wget -qO revoked.crl --no-check-certificate ${DASHBOARD_INTERNAL}/admin/pki/ca/x509/ca/${CAid}.crl
 }
diff --git a/images/openwisp_dashboard/openvpn.json b/images/openwisp_dashboard/openvpn.json
index 96129724..bd055e29 100644
--- a/images/openwisp_dashboard/openvpn.json
+++ b/images/openwisp_dashboard/openvpn.json
@@ -38,7 +38,7 @@
             "mute_replay_warnings": false,
             "secret": "",
             "reneg_sec": 0,
-            "tls_timeout": 0,
+            "tls_timeout": 2,
             "tls_cipher": "",
             "remote_cert_tls": "",
             "float": false,