#-----------------------------------------------------------------------------
# sansone-LDAP.ovpn - LDAP auth
# LC20210303
#-----------------------------------------------------------------------------

# the server
remote sansone.mib.infn.it

# me
client

# use tun device, udp encap & non-standard port (1195)
dev tun
proto udp
port 1195
persist-key
persist-tun

# use a strong cipher, please
cipher AES-256-CBC

# keep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# most clients don't need to bind to a specific local port number.
nobind

# pull dhcp options from server (domain, nameserver list)
pull

# wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
mute-replay-warnings

# auth setup
auth-user-pass

# comment if you don't want the server keeping ask your password every 60 minutes or so
# beware: caching credentials in memory may pose a security threat
auth-nocache

# tls setup
ca Sectigo_intermediate.crt

# server verification - optional
remote-cert-tls server

# just tell me what's going on
verb 3

# Silence repeating messages
mute 20