| Current Path : /home/cgabriel/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : //home/cgabriel/cgabriel05.ovpn |
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
dev tap
;dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 85.214.96.57 1194
;remote my-server-2 1194
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nogroup
# Try to preserve some state across restarts.
persist-key
persist-tun
# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
# ca ca.crt
# cert client.crt
# key client.key
# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server". This is an
# important precaution to protect against
# a potential attack discussed here:
# http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server". The build-key-server
# script in the easy-rsa folder will do this.
ns-cert-type server
# If a tls-auth key is used on the server
# then every client must also have the key.
tls-auth ta.key 1
key-direction 1
# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
cipher AES-128-CBC
auth SHA256
# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo
# Set log file verbosity.
verb 3
# Silence repeating messages
;mute 20
route-method exe
route-delay 2
pull
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
a6:93:94:67:49:f2:3f:00:71:53:11:8b:3e:50:4b:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=IfT_OpenVPN_CA_2021
Validity
Not Before: Dec 11 08:32:23 2023 GMT
Not After : Jan 1 08:32:23 2039 GMT
Subject: CN=cgabriel05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:1f:0d:e3:be:73:ac:43:c2:cc:6a:7c:42:f2:
23:c4:55:f2:f9:8f:52:0e:10:4a:4a:a8:0f:16:b6:
29:fe:44:5e:35:c9:d8:e3:cd:49:80:4d:76:6f:a8:
d2:37:60:41:ac:fe:28:09:9b:16:6f:52:1a:66:f0:
d6:89:04:f6:c3:fd:fa:92:d5:4d:a9:d9:fc:75:41:
d0:90:3c:36:43:8e:22:77:21:58:87:31:3b:5b:3d:
38:67:fd:18:c9:4a:df:ab:63:8f:89:da:41:19:45:
aa:ee:dc:f2:d8:09:a3:71:18:1f:63:d4:19:aa:31:
8b:56:61:2c:35:09:d2:9a:4c:29:b3:07:fe:6b:0d:
a3:83:a1:55:21:aa:fd:0b:f1:9a:4b:28:c7:b1:cc:
6b:f2:15:06:86:ac:27:b6:55:17:5f:36:59:e4:4d:
09:eb:8d:98:c5:57:1c:44:f9:76:db:ce:70:0d:73:
99:a6:48:40:5a:03:c6:ba:61:66:5c:b4:e9:87:62:
61:24:3a:ca:9d:62:6b:9f:02:50:50:e1:88:fb:a9:
cf:21:53:45:36:1a:eb:55:1b:53:9c:58:a7:24:30:
10:ea:d7:59:6a:36:f0:1c:63:f5:6a:ac:04:09:a9:
e5:d6:61:5e:c4:e2:33:21:77:70:2a:48:67:bf:66:
b1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
66:0E:24:46:9A:7F:5B:09:D4:9F:A6:EB:E4:02:29:C1:C6:BD:0F:BC
X509v3 Authority Key Identifier:
keyid:6F:BB:3C:90:BB:7E:D1:C4:62:23:37:F9:0F:B4:97:8A:87:E5:8B:EF
DirName:/CN=IfT_OpenVPN_CA_2021
serial:05:A6:19:0A:D9:8D:C8:78:1E:E6:3D:4B:20:72:BB:23:16:28:B7:AF
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
0a:3f:4d:80:7a:a6:7b:99:6d:a7:32:3b:fa:2f:12:5a:2c:ae:
93:9d:13:ab:fa:4d:15:39:0f:87:eb:70:00:32:dc:53:94:f2:
6d:0d:39:fc:c7:11:1c:da:6e:3c:f7:a3:79:61:aa:38:91:ef:
fc:b4:80:7a:ea:df:ae:10:ba:04:17:1f:31:7f:92:6b:1c:75:
5b:60:f8:3a:eb:6b:8a:3e:b7:17:ee:51:58:77:be:b0:1e:f6:
9e:99:8b:3e:5e:fb:a5:92:f9:a1:b0:f0:79:b6:f1:fc:7b:3a:
5f:50:5c:d4:6f:d6:b6:d5:1f:3e:95:a0:f0:91:e9:0e:5e:f8:
8d:43:3b:27:d8:7c:3f:f8:4c:44:c2:f2:51:d3:c3:05:a0:b3:
a7:66:5d:f1:a6:c4:46:2f:1e:06:4f:26:da:9a:01:db:c1:8e:
ca:2c:a6:54:db:5d:1b:c6:ec:56:37:63:1c:2c:f0:a6:72:e4:
32:6f:06:e3:b6:1b:01:74:4e:e7:95:00:3d:b9:39:df:d7:a9:
0b:85:4c:45:1a:7b:64:0c:34:73:ba:41:e6:78:06:ac:e8:80:
e2:e0:30:ba:20:aa:61:da:c0:ac:34:f0:04:29:ea:3d:51:b4:
d1:72:40:f7:eb:f8:97:70:f0:1a:da:98:d7:2c:1b:02:6f:20:
c8:17:88:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
18fb8f4d5ed7f36d2bdb20cbdf3fbf6a
16f3ab1230f5090a78430196cc7319da
540aa59ef5fbd6ec0bba8fc3135c5916
eb2297da53111bca7b70802e97a0e21b
31e2afc4687b62c8bd65e14f38627eb5
7598ef6c2d4c285dff176c753575fc89
12b6838b85f4f3708c3509f95f8ee05e
fedabd67f15493f64847cfd79dbac018
8ea2a3a0c4dd7334d7f6c29bd0b366ba
42ad7202a68756b2c39acec1b5cac7a4
51a2551dbe4cf22affde87291075443a
bbe008015b4afd3d894bebb25e1247b0
1dab8a4f1a7f38c7f987779098612c16
2c26d71be1dabf288cd71e530dcc465c
7ced7226e3a179c92aab253c00fda59e
d2aa87b70c2dd040810d148dac81bb32
-----END OpenVPN Static key V1-----
</tls-auth>