###############################################################################
# OpenVPN 2.0 Sample Configuration File
# for PacketiX VPN / SoftEther VPN Server
#
# !!! AUTO-GENERATED BY SOFTETHER VPN SERVER MANAGEMENT TOOL !!!
#
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
#
# This configuration file is auto-generated. You might use this config file
# in order to connect to the PacketiX VPN / SoftEther VPN Server.
# However, before you try it, you should review the descriptions of the file
# to determine the necessity to modify to suitable for your real environment.
# If necessary, you have to modify a little adequately on the file.
# For example, the IP address or the hostname as a destination VPN Server
# should be confirmed.
#
# Note that to use OpenVPN 2.0, you have to put the certification file of
# the destination VPN Server on the OpenVPN Client computer when you use this
# config file. Please refer the below descriptions carefully.

###############################################################################
# Specify the type of the layer of the VPN connection.
#
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
#  specify 'dev tun'. (Layer-3 IP Routing Mode)
#
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
#  specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)

dev tun0

###############################################################################
# Specify the underlying protocol beyond the Internet.
# Note that this setting must be correspond with the listening setting on
# the VPN Server.
#
# Specify either 'proto tcp' or 'proto udp'.

proto udp

###############################################################################
# The destination hostname / IP address, and port number of
# the target VPN Server.
#
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
# specify the IP address instead of the hostname.
#
# Note that the auto-generated below hostname are a "auto-detected
# IP address" of the VPN Server. You have to confirm the correctness
# beforehand.
#
# When you want to connect to the VPN Server by using TCP protocol,
# the port number of the destination TCP port should be same as one of
# the available TCP listeners on the VPN Server.
#
# When you use UDP protocol, the port number must same as the configuration
# setting of "OpenVPN Server Compatible Function" on the VPN Server.

# Note: The below hostname is came from the Dynamic DNS Client function
#       which is running on the VPN Server. If you don't want to use
#       the Dynamic DNS hostname, replace it to either IP address or
#       other domain's hostname.

remote X.X.X.X 1194

###############################################################################
# The HTTP/HTTPS proxy setting.
#
# Only if you have to use the Internet via a proxy, uncomment the below
# two lines and specify the proxy address and the port number.
# In the case of using proxy-authentication, refer the OpenVPN manual.

;http-proxy-retry
;http-proxy [proxy server] [proxy port]

###############################################################################
# The encryption and authentication algorithm.
#
# Default setting is good. Modify it as you prefer.
# When you specify an unsupported algorithm, the error will occur.
#
# The supported algorithms are as follows:
#  cipher: [NULL-CIPHER] NULL AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
#          CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
#          RC2-40-CBC RC2-64-CBC RC2-CBC
#  auth:   SHA SHA1 MD5 MD4 RMD160

cipher AES-128-CBC
auth SHA1

###############################################################################
# Other parameters necessary to connect to the VPN Server.
#
# It is not recommended to modify it unless you have a particular need.

resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
remote-cert-tls server
auth-user-pass /etc/openvpn/pass.key
auth-nocache

###############################################################################
# The certificate file of the destination VPN Server.
#
# The CA certificate file is embedded in the inline format.
# You can replace this CA contents if necessary.
# Please note that if the server certificate is not a self-signed, you have to
# specify the signer's root certificate (CA) here.

<ca>
-----BEGIN CERTIFICATE-----
MIIDXDCCAkSgAwIBAgIBADANBgkqhkiG9w0BAQsFADAtMR4wHAYDVQQDDBV3b2xp
bWV4LnNvZnRldGhlci5uZXQxCzAJBgNVBAYTAlBMMB4XDTE4MTAwMzEzNDAwNVoX
DXXXXXXx
-----END CERTIFICATE-----

</ca>

###############################################################################
# The client certificate file (dummy).
#
# In some implementations of OpenVPN Client software
# (for example: OpenVPN Client for iOS),
# a pair of client certificate and private key must be included on the
# configuration file due to the limitation of the client.
# So this sample configuration file has a dummy pair of client certificate
# and private key as follows.

<cert>
-----BEGIN CERTIFICATE-----
XXXXXX
EWjHufHuEhOSMmOIwyOLlxqFUZVNyPIxiGo=
-----END CERTIFICATE-----

</cert>

<key>
-----BEGIN PRIVATE KEY-----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39K2Qme4P2GbEVa51ruwEdXi5QZ70UMRXyLJltAXJ1sSUtDVOF/iWmg3XW6QvHzC
TnYuj9X8IFCPZPgoH5wPhR3aiwKBgQDqDSQ6OAfS8U3Y/j+jM8VGXr7PWo3OUOfU
nuciwWd7LrA2aGfTxzqdSCer9eAPKCWX2L7RzCRoVxSzVn7ffajtmBglM3Yk9/JN
NOvP0YwA8Hunq58XXXXXXXXX
SKT7Qx8NZ+mTlDhss3brMuNvK56ZRzFh1NyY/fhTSrzY3GztwXxKe2O4ggtP7Mop
QN4Yvo8RsbFqqehsb+XNfK/Hvft8V4kVeoHKscohAoGBANXbxjB4tq7a5q4tL4lZ
Jdr02xs/3ABNEVC2QnSsRWZUskU6E4x6pfHsgEs6Tz3Gc4JLlvnTbYiI6fbzqfBg
SG7vPHFE9DM4D5+K20aSFZ786ANgN8+UkrOkN4Y9Qa7lzho/MQWmrFw1MvNjEpl3
0yzo+R22Fbe8sa7Z/QJbHQP3
-----END PRIVATE KEY-----

</key>