###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn948171896.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----
MIID+jCCAuKgAwIBAgIBADANBgkqhkiG9w0BAQsFADB8MSMwIQYDVQQDDBp2cG45
NDgxNzE4OTYuc29mdGV0aGVyLm5ldDEjMCEGA1UECgwadnBuOTQ4MTcxODk2LnNv
ZnRldGhlci5uZXQxIzAhBgNVBAsMGnZwbjk0ODE3MTg5Ni5zb2Z0ZXRoZXIubmV0
MQswCQYDVQQGEwJVUzAeFw0xOTA4MjEwOTQ2MzVaFw0zNzEyMzEwOTQ2MzVaMHwx
IzAhBgNVBAMMGnZwbjk0ODE3MTg5Ni5zb2Z0ZXRoZXIubmV0MSMwIQYDVQQKDBp2
cG45NDgxNzE4OTYuc29mdGV0aGVyLm5ldDEjMCEGA1UECwwadnBuOTQ4MTcxODk2
LnNvZnRldGhlci5uZXQxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA6wyGAWh8QzDNHoql+DwDsU9tylZMzgsvhu25IU+lQhBm5WVc
NUZrffKBHewa32X6lSeeqeLtQ84RIg3iAtgrA0sKUq2cqer4ZBVPcd18Nfuo21xE
rR2u3QnL1usLssh/dWkQ50w+MCxfMVbmQZ/ym/3IbmwRNUlJVFxJ+XlC01esuqgW
bX7fJResMyNXHMnxbOkS5wVYXa8WDDjLUT7keOsTj3L7ZumUQY/+B8uv2v0Xl2aG
0Ki/ggAsMikv9F1rAAg5bUaiVVLPe86buh+ef49yrgMnQ6MrHzNlNMNzA/3R52x6
RS+27B9xZ3KCuqSpKqG5LbmYF8/kSp082W9BmwIDAQABo4GGMIGDMA8GA1UdEwEB
/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEF
BQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsG
AQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAIi1
c2+2sDzgC6/1VqZ0wDeanpm9BjA3FhMb0yeNHKJYTfIgh0IGlw6Q6ceLZldTKwmP
xMBnGxjj/ETQ4cvgMehsI+MViRmMvctziTzuv66rloE59jhH9HEU/lu4kR7M3X7o
W8fGh2zoxh+DQv3YBlNPU/lqqHMKTdzgm9+55jCFdzHl3DnEf/yqu8pk0LjaXXew
pB/jIRQjf+MaIwGLRepk66FsjnRZZqXVGJ5/5XmINqt+QPGHyBgXswXk2WFfRdbG
pqmjpoyHOquXiFnfq6XmumIR/XVO30u/WJapwnd4YEwhO/Uq0mTeqr28K2uo8FtY
e6fi0hzDsPcU97XrZd0=
-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>