###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn856119593.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----
MIID+jCCAuKgAwIBAgIBADANBgkqhkiG9w0BAQsFADB8MSMwIQYDVQQDDBp2cG44
NTYxMTk1OTMuc29mdGV0aGVyLm5ldDEjMCEGA1UECgwadnBuODU2MTE5NTkzLnNv
ZnRldGhlci5uZXQxIzAhBgNVBAsMGnZwbjg1NjExOTU5My5zb2Z0ZXRoZXIubmV0
MQswCQYDVQQGEwJVUzAeFw0xOTA4MjAwMzQyMzdaFw0zNzEyMzEwMzQyMzdaMHwx
IzAhBgNVBAMMGnZwbjg1NjExOTU5My5zb2Z0ZXRoZXIubmV0MSMwIQYDVQQKDBp2
cG44NTYxMTk1OTMuc29mdGV0aGVyLm5ldDEjMCEGA1UECwwadnBuODU2MTE5NTkz
LnNvZnRldGhlci5uZXQxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA0713UxzBhB4mkpl0aTlySkmyHrFNRPLwqQ9N/P3VBZBaTg1/
UccQzYubS7dZ5JHX2ZyWq6tbvb9JbbXElsPHZL+lw8XhHf56woxxsU4irmg6XLWd
IuMppOsTovYBQJ2/ynQRABNWsHGyd/PpuvNTaWHjOwVL18GOtgwDMXOBdIC5HkE5
y2tGbyOQHB70KYpXZxmpP5qsBpayQ5Ehu0CiU9K0OCxegSURpimw025Etdpp+2H7
B+HosFBE3tPZmVOgP6GsE+BUhgPOjcSO8scTnpmLYuwaPXCWWyqd5m4soJnZlu/g
DAYwIfEm+xWW036hyk4dF8BC3Fucl2mS3oZsNwIDAQABo4GGMIGDMA8GA1UdEwEB
/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEF
BQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsG
AQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAG5Y
O/RqU7Y8ySo4dJgxFARZOLLxeXvsj6flXiCHw5KVVBpYJJcl7jadoF2oxZ5Vs7R7
5n2MGZ3ZA2hoDqp3r8yr29qz03c+iXioxR59WL5zz94KmTuZ1tcouvzjqLJIN6jg
S58kOXmH3CiAtqzsd2BEo0VGM8zUYkm7JVyvp4FhZL8jx0BgYpWFy6eD3CKpac24
59qGLFJ24CTDYNrE379ToG7f32cSLiD66+VaTEB/O0/5qM/m8yuH3KUkdbkwteOh
2CV3blKZuMqYK/6E4zadIWnYLO8nd4/VEdUyFLAuWe1F0vApRbN5cW+x1Ck7ZOK2
KTfZ1koWP+5p+3gKfpI=
-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>