Ticket #926: client.conf

# OpenVPN 2.4 client config

server-poll-timeout 12
nobind
link-mtu 1420
server-poll-timeout 15

<connection>
remote SERVER_IP_HERE 443 udp4
mssfix 0
</connection>

<connection>
remote SERVER_IP_HERE 443 tcp4
</connection>

script-security 2
# Just shell script with the content to show variables: (set -o posix; set)
up up.sh

client
dev tun
cipher AES-256-GCM
auth SHA256
comp-lzo
resolv-retry infinite
remote-cert-tls server
sndbuf 0
rcvbuf 0
reneg-sec 0
verb 3

# For single connection persist-* and user/group options can be uncommented
# For dual it's better to keep them commented, otherwise openvpn cannot
# change connection without full restart
;auth-nocache
;persist-key
;persist-tun
;persist-remote-ip

ignore-unknown-option block-outside-dns dhcp-renew register-dns tap-sleep dhcp-release dhcp-option
# Windows specific options
block-outside-dns
dhcp-renew
register-dns
tap-sleep 1

# *nix specific options (Linux/Mac/BSD)
;user openvpn
;group openvpn
nice 5

# Certificates and keys
<ca>
...
</ca>
<cert>
...
</cert>
<key>
...
</key>
key-direction 1
<tls-auth>
...
</tls-auth>