#-----------------------------------------------------------------------------
# seven-X509.ovpn
# features
# - standard openvpn port/encap 1194/UDP
# - X.509 auth
#
# LC20211005
#-----------------------------------------------------------------------------

# the server
remote seven.mib.infn.it

# Hi, I'm a client!!
client

# use tun device, udp encap & default port (1194)
dev tun
proto tcp
persist-key
persist-tun

# cipher
cipher AES-256-GCM
auth SHA256
providers legacy default

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to a specific local port number.
nobind

# pull dhcp options from server (domain, nameserver list)
pull

# Wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
mute-replay-warnings

# auth configuration
# edit to reflect your setup
pkcs12 cert.p12

# do not cache auth information
auth-nocache

# tls setup
ca Harica_intermediate.crt

# tls setup
# server verification - optional
remote-cert-tls server
verify-x509-name 'C=IT, ST=Roma, O=Istituto Nazionale di Fisica Nucleare, CN=seven.mib.infn.it' subject

# just tell me what's going on
verb 3

# Silence repeating messages
mute 20

#---------------------------------------------------------------
# CA certificate(s) and HMAC key
# DO NOT EDIT OR TAMPER BELOW THIS POINT!!!
#---------------------------------------------------------------

<tls-auth>
-----BEGIN OpenVPN Static key V1-----
4395c4d68c1830740084a5fcd3e417c1
f0c337667643ae15b2132a08a9de7922
9066f123bb076d6a32a6d8404cb6aedd
8844c7300474b1c5b6f3e08b094258f2
388a5fd5f4f2b2c80a82347924baebf3
aa59d65af3f2dfabec1e837d2356bd11
e699bbf71844ab1b4a424135bc4bc6f6
de8f70e5617834a97dd2ff9a65dc8c10
27f179e0453b2cb67fa25f08370d4fdb
3732637b0cb369ced50d067b79222a32
cdc42c5cc55cbb26a7edc3357e70e0fb
730f8ff9c28a599dec5444f4e8bb0fa0
8efb0bfd0738dec57c12315e383973cf
f69c46232f1554e68b65e176836b0c6e
75495020e2c999d474ef0eb6553d93eb
01be206a458d650791361c11216ded3a
-----END OpenVPN Static key V1-----
</tls-auth>