Skip to content

Instantly share code, notes, and snippets.

/client.conf

Created June 18, 2015 01:44
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save anonymous/34191764dc4ef867aff0 to your computer and use it in GitHub Desktop.
Save anonymous/34191764dc4ef867aff0 to your computer and use it in GitHub Desktop.
Download ZIP
Hardened OpenVPN client config
Raw
client.conf
client
dev tun
proto udp
remote 123.123.123.123 1194
nobind
persist-key
persist-tun
comp-lzo
verb 3
<ca>
...
</ca>
<cert>
...
</cert>
<key>
...
</key>
<tls-auth>
...
</tls-auth>
remote-cert-tls server
verify-x509-name 'C=XX, ST=XX, L=XX, O=XX, OU=XX, CN=XX, name=XX, emailAddress=XX' subject
key-direction 1
cipher AES-256-CBC
tls-version-min 1.2
auth SHA512
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256:TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment