BUNFRANCE

###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.


###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun


###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp


###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote vpn872975954.v4.softether.net 1194


###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]


###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC CAMELLIA-128-CBC CAMELLIA-192-CBC CAMELLIA-256-CBC
#  auth:   SHA SHA1 SHA256 SHA384 SHA512 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1


###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
auth-user-pass


###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----
MIID+jCCAuKgAwIBAgIBADANBgkqhkiG9w0BAQsFADB8MSMwIQYDVQQDDBp2cG44
NzI5NzU5NTQuc29mdGV0aGVyLm5ldDEjMCEGA1UECgwadnBuODcyOTc1OTU0LnNv
ZnRldGhlci5uZXQxIzAhBgNVBAsMGnZwbjg3Mjk3NTk1NC5zb2Z0ZXRoZXIubmV0
MQswCQYDVQQGEwJVUzAeFw0xOTEyMzEwNTAzMjhaFw0zNzEyMzEwNTAzMjhaMHwx
IzAhBgNVBAMMGnZwbjg3Mjk3NTk1NC5zb2Z0ZXRoZXIubmV0MSMwIQYDVQQKDBp2
cG44NzI5NzU5NTQuc29mdGV0aGVyLm5ldDEjMCEGA1UECwwadnBuODcyOTc1OTU0
LnNvZnRldGhlci5uZXQxCzAJBgNVBAYTAlVTMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAxubeaDMlpTqOSCy2xpdintcQ3V3j0s58mEQgWsRIO7fiBRmM
lDYn7m2eV+MvYJmJSVbM2DdS9NmdlCbam3lAXt2qgrDgj04C8ki06pXWJ6hyL+Su
tUBifUKLokIe4ikaJr3as24sJR4Us+gb1VVot+pb075BFqTn3T/vVUlfjPUwXNh/
z/+gPhr+x/w1PRiVl84D5ior3DtudjT2pNwLsW34v3JrA8c7AwAB7TS5abLWuLz/
xFKmIOGJQoG1P1mcHQ2SuycQISzOO69BMnSHoR9AkB+nkkgfIubF0bxO08R4GMk/
hOKauXtWTcF20N7JnDV72VYxYtB9iQjxjPoFgQIDAQABo4GGMIGDMA8GA1UdEwEB
/wQFMAMBAf8wCwYDVR0PBAQDAgH2MGMGA1UdJQRcMFoGCCsGAQUFBwMBBggrBgEF
BQcDAgYIKwYBBQUHAwMGCCsGAQUFBwMEBggrBgEFBQcDBQYIKwYBBQUHAwYGCCsG
AQUFBwMHBggrBgEFBQcDCAYIKwYBBQUHAwkwDQYJKoZIhvcNAQELBQADggEBAIWs
BlCsXmtICxiVTFRG+0s1nUPMEU/vfkQmNmN3qGXixS6p8yVdiReJCPVig+fdHZMK
ndwK8emQLJvTpUp/v9BnRbKH4zlcdAPxSwyrfP+3ired/yfYrOoC6GgKIvJX/ShX
Jr9eQTOjAfRRCmF+oYT+HrKpuQ5cyAAL16XsWaoRdJrQ7jT4Ks+/6UUC14KNFm0W
bPE3qCHF8CEhCftWlY5ny3/m7CsqeZVniRJotNPWYUe0sc45ScNWt6ZYVRkh7gM0
p0mU0vPHTRs9jHqM80W9KliuZg8G+x4w+Z9DsFTKRvFeC2v0zbEx1a2A8YRS4j4b
CjdARovna4k2AKr1Nic=
-----END CERTIFICATE-----

</ca>


###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----

</key>