Some minor changes on comments.

build_key-pass.sh

@@ -468,7 +468,7 @@ cat << EOF >> "$_client_conf_file"  2> $log_file
 # This option has been deprecated since version 2.4 and 
 # will be removed from later distributions.
 #
-#ns-cert-type server
+;ns-cert-type server
 
 # If a tls-auth key is used on the server
 # then every client must also have the key.
@@ -501,6 +501,9 @@ cat << EOF >> "$_client_conf_file"  2> $log_file
 # Select a cryptographic cipher.
 # If the cipher option is used on the server
 # then you must also specify it here.
+;cipher BF-CBC        # Blowfish (default)
+;cipher AES-128-CBC   # AES
+;cipher DES-EDE3-CBC  # Triple-DES
 EOF
 
 if [[ -n "$SERVER_CIPHER" ]]; then