Client configuration commands help

Scripts with setup, destroy, and modify routing tables and firewall rulesets for client connections.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
antidosed
OpenVpn Newbie
Posts: 1
Joined: Sat Dec 27, 2014 7:19 am

Client configuration commands help

Post by antidosed » Sat Dec 27, 2014 7:30 am

I am using OpenVPN (Viscosity Client for Win) with PrivateInternetAccess as my VPN service. I want to change my config to have this below:

Data Encryption: AES-256
Data Authentication: SHA256
Handshake: RSA4096
DNS Leak Protection enabled
IPv6 Leak Protection enabled


I just don't know the configuration commands, any help & or recommendations as to making my connection more secure would be greatly appreciated.
Also can anyone recommend a better VPN service? Thanks a bunch.

My current config file:
client
dev tun
proto udp
remote us-west.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.pem

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: Client configuration commands help

Post by maikcat » Sat Dec 27, 2014 12:52 pm

short answer,

you use EXACTLY the config file given,
BOTH sides MUST use the SAME settings.

Michael.

User avatar
Traffic
OpenVPN Protagonist
Posts: 4066
Joined: Sat Aug 09, 2014 11:24 am

Re: Client configuration commands help

Post by Traffic » Sat Dec 27, 2014 4:54 pm

antidosed wrote:Data Encryption: AES-256
see openvpn --show-ciphers in The Manual v23x
antidosed wrote:Data Authentication: SHA256
see openvpn --show-digests in The Manual v23x
antidosed wrote:Handshake: RSA4096
You will require to create your full PKI with 4096bit key: see PKI in The HOWTO

Post Reply