conf.ovpn

dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers ...
auth SHA256
tls-client
client
resolv-retry infinite
remote xx.xx.xxx.xxx 1195 udp
remote xx.xx.xxx.xxx 1195 udp
remote xx.xx.xxx.xxx 1195 udp
lport 0
verify-x509-name "vpnhost.main.foo" name
auth-user-pass
remote-cert-tls server
passtos

<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
...
-----END PRIVATE KEY-----
</key>
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
...
-----END OpenVPN Static key V1-----
</tls-auth>