fixy fixy

handshake_ix.go

@@ -27,7 +27,7 @@ func ixHandshakeStage0(f *Interface, hh *HandshakeHostInfo) bool {
 	v := cs.initiatingVersion
 	if hh.initiatingVersionOverride != cert.VersionPre1 {
 		v = hh.initiatingVersionOverride
-	}
+	} else if v < cert.Version2 {
 		// If we're connecting to a v6 address we must use a v2 cert
 		for _, a := range hh.hostinfo.vpnAddrs {
 			if a.Is6() {
@@ -35,6 +35,7 @@ func ixHandshakeStage0(f *Interface, hh *HandshakeHostInfo) bool {
 				break
 			}
 		}
+	}
 
 	crt := cs.getCertificate(v)
 	if crt == nil {