##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server.     #
#                                            #
# This configuration can be used by multiple #
# clients, however each client should have   #
# its own cert and key files.                #
#                                            #
# On Windows, you might want to rename this  #
# file so it has a .ovpn extension           #
##############################################

# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Are we connecting to a TCP or
# UDP server?  Use the same setting as
# on the server
proto udp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote gw-akb.oopen.de 1194

topology subnet

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Try to preserve some state across restarts.
persist-key
persist-tun

# Server CA
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

# Client Certificate
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>

# Client Key
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----
</key>

# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server".  This is an
# important precaution to protect against
# a potential attack discussed here:
#  http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server".  The build-key-serve
ns-cert-type server

# If a tls-auth key is used on the server
# then every client must also have the key.
#
# Don't forget to set the 'key-direction' Parameter if using
# Inline Key. Usualy , sever has key direction '0', while client
# has ke direction '1'.
#
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
5b91b2a91925f7503bb408768cb5053b
80a9d011f37c13df8297549c485d787b
6450a5341cd9b5079bf4993cd7724c91
8ae6953503cf30565dc75025061990c7
44348470db2143ff80b8ed281d822a69
a2d67538439c1f04f73df867848f618f
cc096eb98252e5c7e01a7921803ca4fe
18a0df2a99aaf15839f598fc5a3f24b9
17afcfd477d49792ffe450a18b8ad0f2
a9b1e5bc658e066e461472b2439ad423
1be921f71ac59a050bc751f681fcd553
60c4274c640dc56b0e140d5e9e062349
12bfaa7450b615bbc898f822dd5eb6bc
f3023bbcd87fb2a18c651dbae4bfbbcb
5797d4b6c01f0bd700681b308e19b239
53cfefa995eb4bf57ee985194e814548
-----END OpenVPN Static key V1-----
</tls-auth>

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.

# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo

# Verbosity level.
# 0 -- quiet except for fatal errors.
# 1 -- mostly quiet, but display non-fatal network errors.
# 3 -- medium output, good for normal operation.
# 9 -- verbose, good for troubleshooting
verb 1

# Setting 'pull' on the client takes care to get the 'push' durectives
# from the server
pull