client
verb 4
connect-retry 2 300
resolv-retry 10
dev tun
remote 67.205.153.5 443 tcp-client
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgdITxznXFw9xCpmVr
0KbNWUj15UZ97FeiSSt+gvajDMGhRANCAARVcuyDE5Vxpj6aw4hkzBQeCON5XQGR
JnwxTumWufgsXLkitEbpbCxfg9WrvHBPDjT0PIdqKXLAPAUNP9TmXEV2
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----
MIIB0DCCAXWgAwIBAgIQMSH474WT5kg+NNT6dJ2u5TAKBggqhkjOPQQDAjAeMRww
GgYDVQQDDBNjbl93NERnT3RNbnhrM1N3aVFaMB4XDTIyMTAxNTE2MDM1N1oXDTI1
MDExNzE2MDM1N1owEzERMA8GA1UEAwwISU5ESUFUUkswWTATBgcqhkjOPQIBBggq
hkjOPQMBBwNCAARVcuyDE5Vxpj6aw4hkzBQeCON5XQGRJnwxTumWufgsXLkitEbp
bCxfg9WrvHBPDjT0PIdqKXLAPAUNP9TmXEV2o4GfMIGcMAkGA1UdEwQCMAAwHQYD
VR0OBBYEFL+PD4s5+GpSFhKo0fw78c4BdZhCME4GA1UdIwRHMEWAFA7Cy6rSo4dB
ZeAy2YBZmhi1VWQFoSKkIDAeMRwwGgYDVQQDDBNjbl93NERnT3RNbnhrM1N3aVFa
ggkAx6Q+dG/NEMAwEwYDVR0lBAwwCgYIKwYBBQUHAwIwCwYDVR0PBAQDAgeAMAoG
CCqGSM49BAMCA0kAMEYCIQD5dgJA8Dz0pFrzsh4+QumrrPsuC+nZWHFqFlcFcbTP
zgIhALsl9n9lKHVN+cJakBXmV+EhxEq9C1HgfbuNJlADIr0a
-----END CERTIFICATE-----
</cert>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
905e4b595c4e71c0aa350c5e43db94b4
a03681827a9dad4dd8fe5438b8b2d222
7e0a98cadc9819c197014fc0655007fd
faae1622c56849aaa716e15c2f2d5d7e
82816cb90c9317d062c31bd8bdbf6ee0
8144a47c32f085f8b7e2af10384e3152
ed69ce6b88c82fc3a3a5d93871e49838
a077c0153859306a4863bf6db6563c57
69c7cf815137ff07ab5b54582e90ec20
2416e71cd66bdf7ac2dde8db2b546e28
ceff35c2b6d9822fd4e7967723968a5f
1199bc620d647c38b14d58c9aad06d77
e8ad20a1b22d0684c35a5c88add677c8
76caaf7d748fc27a28fa77ae9513675e
6d4e58f83ed388c3d4ed3ad1870425f3
edc580addec03526e6a459cddba44ca4
-----END OpenVPN Static key V1-----
</tls-crypt>
route 0.0.0.0  0.0.0.0 vpn_gateway
route 67.205.153.5  255.255.255.255 net_gateway
route 151.101.65.124  255.255.255.255 net_gateway
route 151.101.193.124  255.255.255.255 net_gateway
route 151.101.129.124  255.255.255.255 net_gateway
route 151.101.1.124  255.255.255.255 net_gateway
dhcp-option DNS 8.8.8.8
dhcp-option DNS 8.8.4.4
nobind
remote-cert-tls server
cipher AES-128-GCM
auth SHA256
persist-tun
# persist-tun also enables pre resolving to avoid DNS resolve problem
preresolve
# Use system proxy setting
management-query-proxy
# Custom configuration options
# You are on your on own here :)
# These options found in the config file do not map to config settings:
setenv opt block-outside-dns
ignore-unknown-option block-outside-dns
tls-version-min 1.2
resolv-retry infinite
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256