###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn727784975.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
MIIDyjCCArKgAwIBAgIBADANBgkqhkiG9w0BAQsFADBkMRswGQYDVQQDDBIxODk2
Nzg0NDkzMzM1MDI0NTAxGzAZBgNVBAoMEjE4OTY3ODQ0OTMzMzUwMjQ1MDEbMBkG
A1UECwwSMTg5Njc4NDQ5MzMzNTAyNDUwMQswCQYDVQQGEwJVUzAeFw0xOTA5MjUw
NjI1MDJaFw0zNzEyMzEwNjI1MDJaMGQxGzAZBgNVBAMMEjE4OTY3ODQ0OTMzMzUw
MjQ1MDEbMBkGA1UECgwSMTg5Njc4NDQ5MzMzNTAyNDUwMRswGQYDVQQLDBIxODk2
Nzg0NDkzMzM1MDI0NTAxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA5D0PpAvYDkie7o6D9GRKBo5znoA/DrMj7ORIg//7wajPZhim
O3fsMZDaqG1j8RrTVMvhtyQ30xbqttwS3Ir8Zjt9jP46GuZZz95YUw5tDAEpgyg+
6J2WSJCljwWDZUHYLTCUj8/lPAQqAE3XV/1o7l043319cJQxfWjhNib8zrP10H7q
M8ObtijA3T3se7Z9bxazZeBhRvz3ElnAxOtZNhiN4cehouBqatbLGy6U8eA3k58/
fFioUjwQp/Qfd74qgenKuPMhrhJJn9nKWXX2apgLhHUe3IhMJrvSzcqTIEHz7GEL
+hGKoYdqp+zoK8mxQ1XBN65FhHjpMGwch8Pn/wIDAQABo4GGMIGDMA8GA1UdEwEB
/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEF
BQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsG
AQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAD8O
zg4Nk1Vd3i+V8DKUalbFc01ZfY3gmIu0/utfEu6D1+j10eqE4FGWlF8ObdhKUwiR
atx29YkloPRXh0A0JZVygNokLDmuY18hwIuCX3081O+KFekF7WmtQVHkTj/SUqit
20ucz/iQIMwS1Jv3nptFYYOeAyRXnmVsn4pVtLuqqOKVvz9RLD/g3u+tswAkF3mb
HDD4IbYcF2WJyv/1l45V7vsqz4r9nJYtQ2DKmD4a0Dy+gtyIn73NTzRhobDMrU1C
dUHsWbY2JzRnxwCkRehVE8dkhULZxV8TlDXZdAG1ai4bb5q61fRbAewRL3bLDFhs
NMV5Lr5eDR9qhfM7M/s=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>