##############################################
# Sample client-side OpenVPN 2.0 config file #
# for connecting to multi-client server.     #
#                                            #
# This configuration can be used by multiple #
# clients, however each client should have   #
# its own cert and key files.                #
#                                            #
# On Windows, you might want to rename this  #
# file so it has a .ovpn extension           #
##############################################

# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client

# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
;dev tap
dev tun

# Are we connecting to a TCP or
# UDP server?  Use the same setting as
# on the server
proto udp

# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote gw-akb.oopen.de 1194

topology subnet

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to
# a specific local port number.
nobind

# Try to preserve some state across restarts.
persist-key
persist-tun

# Server CA
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>

# Client Certificate
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>

# Client Key
<key>
-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----
</key>

# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server".  This is an
# important precaution to protect against
# a potential attack discussed here:
#  http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server".  The build-key-serve
ns-cert-type server

# If a tls-auth key is used on the server
# then every client must also have the key.
#
# Don't forget to set the 'key-direction' Parameter if using
# Inline Key. Usualy , sever has key direction '0', while client
# has ke direction '1'.
#
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
5b91b2a91925f7503bb408768cb5053b
80a9d011f37c13df8297549c485d787b
6450a5341cd9b5079bf4993cd7724c91
8ae6953503cf30565dc75025061990c7
44348470db2143ff80b8ed281d822a69
a2d67538439c1f04f73df867848f618f
cc096eb98252e5c7e01a7921803ca4fe
18a0df2a99aaf15839f598fc5a3f24b9
17afcfd477d49792ffe450a18b8ad0f2
a9b1e5bc658e066e461472b2439ad423
1be921f71ac59a050bc751f681fcd553
60c4274c640dc56b0e140d5e9e062349
12bfaa7450b615bbc898f822dd5eb6bc
f3023bbcd87fb2a18c651dbae4bfbbcb
5797d4b6c01f0bd700681b308e19b239
53cfefa995eb4bf57ee985194e814548
-----END OpenVPN Static key V1-----
</tls-auth>

# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.

# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo

# Verbosity level.
# 0 -- quiet except for fatal errors.
# 1 -- mostly quiet, but display non-fatal network errors.
# 3 -- medium output, good for normal operation.
# 9 -- verbose, good for troubleshooting
verb 1

# Setting 'pull' on the client takes care to get the 'push' durectives
# from the server
pull