| Current Path : /var/www/web-klick.de/div/ |
Linux ift1.ift-informatik.de 5.4.0-216-generic #236-Ubuntu SMP Fri Apr 11 19:53:21 UTC 2025 x86_64 |
| Current File : /var/www/web-klick.de/div/cgabriel03.ovpn |
# Specify that we are a client and that we
# will be pulling certain config file directives
# from the server.
client
# Use the same setting as you are using on
# the server.
# On most systems, the VPN will not function
# unless you partially or fully disable
# the firewall for the TUN/TAP interface.
dev tap
;dev tun
# Windows needs the TAP-Win32 adapter name
# from the Network Connections panel
# if you have more than one. On XP SP2,
# you may need to disable the firewall
# for the TAP adapter.
;dev-node MyTap
# Are we connecting to a TCP or
# UDP server? Use the same setting as
# on the server.
;proto tcp
proto udp
# The hostname/IP and port of the server.
# You can have multiple remote entries
# to load balance between the servers.
remote 85.214.96.57 1194
;remote my-server-2 1194
# Keep trying indefinitely to resolve the
# host name of the OpenVPN server. Very useful
# on machines which are not permanently connected
# to the internet such as laptops.
resolv-retry infinite
# Most clients don't need to bind to
# a specific local port number.
nobind
# Downgrade privileges after initialization (non-Windows only)
;user nobody
;group nogroup
# Try to preserve some state across restarts.
persist-key
persist-tun
# If you are connecting through an
# HTTP proxy to reach the actual OpenVPN
# server, put the proxy server/IP and
# port number here. See the man page
# if your proxy server requires
# authentication.
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
# Wireless networks often produce a lot
# of duplicate packets. Set this flag
# to silence duplicate packet warnings.
;mute-replay-warnings
# SSL/TLS parms.
# See the server config file for more
# description. It's best to use
# a separate .crt/.key file pair
# for each client. A single ca
# file can be used for all clients.
# ca ca.crt
# cert client.crt
# key client.key
# Verify server certificate by checking
# that the certicate has the nsCertType
# field set to "server". This is an
# important precaution to protect against
# a potential attack discussed here:
# http://openvpn.net/howto.html#mitm
#
# To use this feature, you will need to generate
# your server certificates with the nsCertType
# field set to "server". The build-key-server
# script in the easy-rsa folder will do this.
ns-cert-type server
# If a tls-auth key is used on the server
# then every client must also have the key.
tls-auth ta.key 1
key-direction 1
# Select a cryptographic cipher.
# If the cipher option is used on the server
# then you must also specify it here.
cipher AES-128-CBC
auth SHA256
# Enable compression on the VPN link.
# Don't enable this unless it is also
# enabled in the server config file.
comp-lzo
# Set log file verbosity.
verb 3
# Silence repeating messages
;mute 20
route-method exe
route-delay 2
pull
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:2f:ee:eb:34:52:bd:75:2b:47:58:26:8e:23:a7:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=IfT_OpenVPN_CA_2021
Validity
Not Before: May 25 10:01:05 2022 GMT
Not After : Jun 15 10:01:05 2037 GMT
Subject: CN=cgabriel03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:87:32:e3:ea:a5:6c:3e:d2:f1:01:6c:0d:29:
e3:6b:de:15:84:28:84:57:e0:db:84:88:ea:42:38:
03:34:47:92:de:52:b9:21:bf:9b:7c:39:58:41:60:
b7:a6:9e:16:0a:69:01:3c:08:1c:f5:e1:48:59:16:
ab:0b:ea:1b:32:af:51:15:16:a2:6e:cd:f0:5b:a9:
b4:97:b2:50:0a:d4:e2:56:88:62:81:b3:8d:3d:29:
b9:5b:2a:53:78:37:2c:5b:26:3a:03:a4:84:9c:6d:
50:b3:4b:ba:3b:9a:6c:30:44:cb:83:d2:ac:e1:c4:
d7:10:c0:2f:65:b4:fe:4d:41:38:db:c7:5a:63:56:
6f:2e:a9:48:a7:12:d5:99:be:22:be:b3:51:93:38:
35:be:03:ba:de:4c:46:ca:79:ee:46:a5:15:46:d1:
6a:51:07:03:61:c2:a3:7a:a7:bd:f0:1c:17:b6:8c:
9c:f2:02:07:23:78:c4:da:9b:fe:14:99:18:5d:d9:
6c:fd:23:7b:b2:76:2e:4a:9a:34:34:1c:c3:8a:b6:
fc:36:15:22:26:f0:a1:8d:be:1f:92:a4:a1:fe:ca:
96:42:0e:cb:0c:e2:eb:78:f8:bd:5a:84:0e:ab:d4:
96:57:81:3b:52:87:1d:ab:fe:bc:d5:b4:0e:11:e4:
17:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
46:65:DE:25:BE:04:97:1A:A4:F5:5B:54:6E:A7:80:C5:1A:DE:0B:B3
X509v3 Authority Key Identifier:
keyid:6F:BB:3C:90:BB:7E:D1:C4:62:23:37:F9:0F:B4:97:8A:87:E5:8B:EF
DirName:/CN=IfT_OpenVPN_CA_2021
serial:05:A6:19:0A:D9:8D:C8:78:1E:E6:3D:4B:20:72:BB:23:16:28:B7:AF
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
78:16:0f:bf:38:e0:98:7a:c2:77:72:fc:b2:1e:b7:5e:cc:20:
b9:21:88:17:dc:fd:af:7d:9d:b6:89:4c:0f:11:13:3f:07:32:
68:0b:6c:50:cd:e6:7f:bf:10:0a:96:8a:b6:71:ab:72:30:f4:
16:e3:73:61:a5:6f:24:07:3a:0f:99:2a:11:3c:74:45:50:4e:
40:db:82:f8:5d:32:2a:f2:ff:7d:a9:0a:9b:0d:5f:60:4e:cc:
76:f7:2b:f7:18:cf:63:76:e5:8b:d4:a4:1c:06:6c:82:fd:28:
75:8f:9a:7d:d5:46:13:93:b3:f7:73:c0:74:20:11:c9:60:1f:
b9:0f:1b:6b:3e:51:e2:38:2e:f0:7d:d9:ca:09:a9:a0:95:48:
69:a6:05:6f:87:b7:6f:ea:a2:d1:c4:a3:53:ef:77:2f:bb:9a:
bf:93:c3:60:c4:43:44:33:dd:e0:22:9c:9b:fc:66:10:a1:20:
2e:64:8b:d5:1c:4f:c4:38:79:27:7d:51:7f:05:9f:24:b1:d3:
90:f6:00:51:91:31:89:9f:85:b5:8c:0f:ca:95:38:80:64:6c:
a1:be:a3:fc:8f:5f:69:2a:7b:26:65:7c:f4:36:2b:0a:35:a2:
6c:f4:7d:48:bb:25:ef:52:8f:71:0c:1f:cc:ac:9d:60:1a:b3:
27:47:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
18fb8f4d5ed7f36d2bdb20cbdf3fbf6a
16f3ab1230f5090a78430196cc7319da
540aa59ef5fbd6ec0bba8fc3135c5916
eb2297da53111bca7b70802e97a0e21b
31e2afc4687b62c8bd65e14f38627eb5
7598ef6c2d4c285dff176c753575fc89
12b6838b85f4f3708c3509f95f8ee05e
fedabd67f15493f64847cfd79dbac018
8ea2a3a0c4dd7334d7f6c29bd0b366ba
42ad7202a68756b2c39acec1b5cac7a4
51a2551dbe4cf22affde87291075443a
bbe008015b4afd3d894bebb25e1247b0
1dab8a4f1a7f38c7f987779098612c16
2c26d71be1dabf288cd71e530dcc465c
7ced7226e3a179c92aab253c00fda59e
d2aa87b70c2dd040810d148dac81bb32
-----END OpenVPN Static key V1-----
</tls-auth>