#-----------------------------------------------------------------------------
# sansone-X509.ovpn
# LC20210303
#-----------------------------------------------------------------------------

# the server
remote sansone.mib.infn.it

# me
client

# use tun device, udp encap & default port (1194)
dev tun
proto udp

persist-key
persist-tun

# cipher
cipher AES-256-CBC

# skKeep trying indefinitely to resolve the
# host name of the OpenVPN server.  Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite

# most clients don't need to bind to a specific local port number.
nobind

# pull dhcp options from server (domain, nameserver list)
pull

# wireless networks often produce a lot
# of duplicate packets.  Set this flag
# to silence duplicate packet warnings.
mute-replay-warnings

# tls setup
# you personal certificate: edit and uncomment
#pkcs12 personal-Sectigo-cert.p12
# or
#pkcs12 personal-Digicert-cert.p12

# tls setup
ca Sectigo_intermediate.crt

# server verification - optional
remote-cert-tls server

# just tell me what's going on
verb 3

# Silence repeating messages
mute 20