lauri/certidude
1
0
Fork 0
mirror of https://github.com/laurivosandi/certidude synced 2025-10-31 01:19:11 +00:00
Code Issues Activity

Add OpenVPN client template

Browse Source
This commit is contained in:
Lauri Võsandi
2017-01-30 16:36:22 +00:00
parent 0bca61e61f
commit 9c80c7c2c3
1 changed files with 47 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

47
doc/template.ovpn Normal file
View File

@@ -0,0 +1,47 @@
# Copy this file to /etc/certidude/template.ovpn and customize gateway IP addresses
# Run as client
client # tls-client; pull
nobind
# OpenVPN gateway(s), uncomment remote-random to load balance
comp-lzo
proto udp
remote 1.2.3.4
;remote 1.2.3.5
;remote-random
# Virtual network interface settings
dev tun
persist-tun
# Customize crypto settings
;tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA384
;cipher AES-256-CBC
;auth SHA384
# Check that server presented certificate has TLS Server flag present
remote-cert-tls server
# X.509 business
persist-key
<ca>
{{ca}}
</ca>
<key>
{{key}}
</key>
<cert>
{{cert}}
</cert>
# Revocation list
<crl-verify>
{{crl}}
</crl-verify>
# Pre-shared key for extra layer of security
;<ta>
;...
;</ta>