client
verb 4
connect-retry 2 300
resolv-retry 60
dev tun
remote 146.190.252.55 701 tcp-client
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----
MIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgp4W0Q8HiGB3NW8oQ
5qLNyvq/l6Bbn03JMW7VQiHktyihRANCAASGN5W/qLMJvLy+ZCHZxugJB0CwJmW+
1pZ+MmsjbMded8t7spmD/FF9/4kZnklDKZplibDgUfYm6vToVG02+N5c
-----END PRIVATE KEY-----
</key>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
427d30c5426c4f5910514d5ca5764c7c
b35805c8e5811aeab4e7c47285c91b0b
d81a8a9e5e8f8686b93f36a63afb70d9
0070ddc6a40edb9cb360f4abe461d534
5f95bb6372e86b8154c41abef7111d6b
0bd5274e2da45ebdbfe27fc31c0956c9
d1bfbef4a423391866b5ac989ad9de0f
ad7bd50dd41a5aab5a041d417181d3a4
872066a42d7e0a1145e8ea1125a9dbb9
7fdb3d4af0667be3d5c06b7d8a4e1724
9abe032c4643e7836ab069d42c5f665a
6f9c276d41ac7f1128582608980b3eee
eb5d6204d93ce031c0610659e766cbcf
665d8acb59900d89dae17be94335455f
f03eaa69684f5e6ce9fb2e72a5df8bd2
0a66b60ec2ef5c58d60ed42b85b08a86
-----END OpenVPN Static key V1-----
</tls-crypt>
route 146.190.252.55  255.255.255.255 net_gateway
nobind
verify-x509-name server_VYt51vZUhJ6J2cU7 name
remote-cert-tls server
cipher AES-128-GCM
auth SHA256
persist-tun
# persist-tun also enables pre resolving to avoid DNS resolve problem
preresolve
# Use system proxy setting
management-query-proxy
# Custom configuration options
# You are on your on own here :)
# These options found in the config file do not map to config settings:
setenv opt block-outside-dns
ignore-unknown-option block-outside-dns
resolv-retry infinite
tls-cipher TLS-ECDHE-ECDSA-WITH-AES-128-GCM-SHA256
tls-version-min 1.2