client
dev tun
proto udp

remote xxxx

cipher AES-256-CBC
resolv-retry infinite
nobind
persist-key
persist-tun
verb 4
remote-cert-tls server

ping 10
ping-restart 60
compress

sndbuf 524288
rcvbuf 524288

auth-user-pass userpass.txt
ca xxxx.crt

block-outside-dns

tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA