#-----------------------------------------------------------------------------
# ldap-openvpn-client.conf
# config file for LDAP authenticated OpenVPN clients
#
# Luca 'il Sire' Carbone <luca.carbone_@_mib.infn.it> 20090610
#-----------------------------------------------------------------------------

# the server
remote bifrost.mib.infn.it

# Hi, i'm a client!
client

# using tap device, udp encap and *** port 1195 ***
# *** please, DO NOT MODIFY PORT DEFINITION ***
dev tap
proto udp
port 1195

# Do  not bind to local address and port.
nobind

# real-time compression
comp-lzo

#
# network setup
#

# pull dhcp options from server (domain, nameserver list)
# XP doesn't need ancillary scripts (client-up, client-down)
pull 

#
# tls/security setup
#

# CA INFN certificate - customize to reflect your configuration
ca DigiCertAssuredIDRootCA.pem

cipher AES-256-CBC

# auth mech.
auth-user-pass

# for OpenVPN version > 2.0.9
#script-security 2

# server verification - optionaL
remote-cert-tls server

# optional server's CN verification - optional
#tls-remote bifrost.mib.infn.it

#
# logging setup
#

# just tell me what's goin' on
verb 3