###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn406641036.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
MIID0DCCArigAwIBAgIBADANBgkqhkiG9w0BAQsFADBnMRwwGgYDVQQDDBM2OTU1
MjM0ODMzNTU2MjU1OTMzMRwwGgYDVQQKDBM2OTU1MjM0ODMzNTU2MjU1OTMzMRww
GgYDVQQLDBM2OTU1MjM0ODMzNTU2MjU1OTMzMQswCQYDVQQGEwJVUzAeFw0xOTA4
MjkxMjQ2MzZaFw0zNzEyMzExMjQ2MzZaMGcxHDAaBgNVBAMMEzY5NTUyMzQ4MzM1
NTYyNTU5MzMxHDAaBgNVBAoMEzY5NTUyMzQ4MzM1NTYyNTU5MzMxHDAaBgNVBAsM
EzY5NTUyMzQ4MzM1NTYyNTU5MzMxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA2CKfqq1QJias/sxLTZwh7uk1v3WPk558Oumpu3YR
mLqjzwCDdX/oAOKk/LxtQ5FoqE3lhk837zLt85vZBILfkeJdZkHo8tUJumGOmYuZ
vZEktEAVGwny7UefpKwjgY1DIs8Ee0uRNhuKeWd94B1ZEUeCQAZnwiBzcSjA2kul
RYqggEeB4YAbBdR1Ld5bnhJGY6gOpKVvq/SsCpYt5qA/4A8HZRNLtILWIwampsMc
PCSzSUiEi1Wy5V4XFe9l/PC3B78nwNxX0luUiT3ekPmgE/M09cSLRvfqaMUCLRVW
75CbOR3E5kgGCR5iGvGwrt1Siv5hnjXWTVWy8CjgsKEC2QIDAQABo4GGMIGDMA8G
A1UdEwEB/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMB
BggrBgEFBQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUH
AwYGCCsGAQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQAD
ggEBADhbHlcoumo3qRA5c8mT3O5LWb0+fy4AZC0jvjUcPo8xYDJPqRol2V9TwTsY
k9qQcZoK9keUKNTNDsfJQew1hYXsX0M9cNOy4utgWruzrz5t0mDJ/pksc/xEyMnf
eC/Ofgw2wTvGogkD0bkYOTpIdBMWqcwdEuZblnMnEfdbaevJthu4Fxo5kCXj6KM5
smnu+SOXFs4mYnkFZ6mwLZ6IfBIPBza0Cp6B/CWTguigvTaXH0lNdVCSfgigOiAL
Fd1/P/6H6dd+Pex7/4pewc90dQYenRE/s+ebjjaiukQOhWgILbUJNU/aZQ0j440d
Q6XwMr3PIWpYt6jrvCLrA4mSQTI=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>