###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn954985809.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
MIID0DCCArigAwIBAgIBADANBgkqhkiG9w0BAQsFADBnMRwwGgYDVQQDDBMyMjAw
NTI0MDEyMzI1NjkwNDYxMRwwGgYDVQQKDBMyMjAwNTI0MDEyMzI1NjkwNDYxMRww
GgYDVQQLDBMyMjAwNTI0MDEyMzI1NjkwNDYxMQswCQYDVQQGEwJVUzAeFw0xOTA4
MjAwNDI5NDZaFw0zNzEyMzEwNDI5NDZaMGcxHDAaBgNVBAMMEzIyMDA1MjQwMTIz
MjU2OTA0NjExHDAaBgNVBAoMEzIyMDA1MjQwMTIzMjU2OTA0NjExHDAaBgNVBAsM
EzIyMDA1MjQwMTIzMjU2OTA0NjExCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAwl4pk525WbWWMOnWtA4Btv73ht8Ilw04VNA7VO+y
Xrb7r0ZITjEsm+6yTEQUb7hdjPcqlMtHOCyD9oopLMR+O7EblDfdv1s6FJmUaB/c
jHAOOnoP4mR0xTqb6Zz0VBujBd4Ahl6aaLjsxfSyefub6hiyUkUAuqUQtOl3cNTW
UicZJE8GTISTmBfIe9y1Mwf1/zIR6IQVq7jQygeTePmvPW9RK20f7MJH9X+5WQNg
roflSCsWFnU8VEPVzeNKj1RMG/bEeJD8mK5XmD5dD2eWascYtaWMfXosKkpE7KRh
GxK9nKP3gOdWp/6ABRq/RwWGYdKYn0z6jbXfvol1Mb1PfwIDAQABo4GGMIGDMA8G
A1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMB
BggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUH
AwYGCCsGAQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQAD
ggEBAE+yr/GkpYwkxFgnrA/W19KiKA4Ukccj55zPo3FlXRndAy69+ptixDbE99C0
WMrAAj9oYukJSwYGITKnQ15W7qr4by0E5XRfnWQhWx1vBI0l1/zHaSHZg1GsR7i3
v3Fl96hXOaLBri6JN6/MQL8wQQg0Aylq0DJPOLoRi1HvSZEXakIrHAZe7xwX+wVK
R8EhQTlXAhbhxE7Xpr1LDLJTG1WWE+rCnyIxVbGSH7jthEISNP2jd3wUikCsu17+
44Im5/vq7kl/NxXm1jNzYxY6CgfglfXizprumQ3dIECmttLTWq5oqG3XuQ3QGh44
T/jQaD2YBAFFF9xFeqEpo1Nc9kg=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>