#-----------------------------------------------------------------------------
# client-MIB.ovpn
#-----------------------------------------------------------------------------

# the server
remote bifrost.mib.infn.it

# Hi, I'm a client!!
client

# use tap device, udp encap & default port (1194)
dev tap
proto udp

# Keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# Most clients don't need to bind to a specific local port number.
nobind

# real-time compression
comp-lzo

# pull dhcp options from server (domain, nameserver list)
pull 

# Wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
mute-replay-warnings

# tls setup
# if the private key is encrypted and passphrase protected, then upon
# openvpn startup (openvpn --config /etc/openvpn/client.conf) you will
# be asked for the key's passphrase.
pkcs12 *_REMOVE_ME_AND_PUT_HERE_THE_NAME_OF_THE_FILE_CONTAINING_YOUR_CERT_*

cipher AES-256-CBC

# server verification - optional
remote-cert-tls server
# optional server's CN verification - optional
tls-remote bifrost.mib.infn.it

# just tell me what's going on
verb 3

# Silence repeating messages
mute 20