proto udp
tun-mtu 1500
fragment 1300
mssfix
cipher AES-256-CBC
ignore-unknown-option ncp-disable # ovpn 2.3 to 2.4 transition
ncp-disable

remote frankfurt.perfect-privacy.com 149
remote frankfurt.perfect-privacy.com 1151
remote frankfurt.perfect-privacy.com 1150
remote frankfurt.perfect-privacy.com 1149
remote frankfurt.perfect-privacy.com 1148
remote frankfurt.perfect-privacy.com 148
remote frankfurt.perfect-privacy.com 151
remote frankfurt.perfect-privacy.com 150

auth SHA512
auth-user-pass
client
compress
dev tun
#float
hand-window 120
inactive 604800
mute-replay-warnings
nobind
#ns-cert-type server  # deprecated in openvpn 2.5
remote-cert-tls server # new
persist-key
persist-remote-ip
persist-tun
ping 5
ping-restart 120
redirect-gateway def1
remote-random
reneg-sec 3600
resolv-retry 60
route-delay 2
route-method exe
script-security 2
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA
tls-timeout 5
verb 4
tun-ipv6

register-dns

key-direction 1
<ca>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

</ca>

<cert>
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----

</key>

<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
-----END OpenVPN Static key V1-----

</tls-auth>