client
verb 4
connect-retry 2 300
resolv-retry 60
dev tun
remote 167.71.3.184 1194 tcp-client
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg8lr5OOe4PJvQADLf
dsVSvPio5z2UZDr7rtqPGBL8SVShRANCAARzn8VKkOcFDFcGXMfFGspD/1QgwRfm
qJRKvCuUxXIL5AOlrMbxnTRxBsZL1fQShVCIK4R/j7fKjm9+e8S0wK7F
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
7016afde048cbcbe748d357495729592
51f7690c494beca6833394458b2c00ad
937eed3eaa71cec679ff5f643d430634
2949859b69164cc131d93ab9b96bc0a1
966b70abdb54d7ea3d4dd5f0aae46937
ec12886ece24fbbe01f7e092478482dd
02360294975ee22e48428b7502b2f59e
eebc6cabc270c690951f9a4b333e30c9
30f05b047368f9cbab557769de3bf657
05869c8b3051cd2dfe128add32973740
293684459d8a56df7cb3aa615df6cb63
99a78ea2d80753c90d07052fb53c067e
009208b3edb4c07750a11023fb76598a
09f9e76ea5a7d2675c3f9dddf9b361b1
2576258467fe21616af93f9239e997dc
9308b6e2d225ee051d9dfb4b5ec189fb
-----END OpenVPN Static key V1-----
</tls-crypt>
route 167.71.3.184  255.255.255.255 net_gateway
nobind
verify-x509-name server_mGkwbSDQ8d5jPoRe name
remote-cert-tls server
cipher AES-128-GCM
auth SHA256
persist-tun
# persist-tun also enables pre resolving to avoid DNS resolve problem
preresolve
# Use system proxy setting
management-query-proxy
# Custom configuration options
# You are on your on own here :)
# These options found in the config file do not map to config settings:
setenv opt block-outside-dns
ignore-unknown-option block-outside-dns
resolv-retry infinite
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
tls-version-min 1.2