# Enables connection to GUI
management /data/data/de.blinkt.openvpn/cache/mgmtsocket unix
management-client
management-query-passwords
management-hold
setenv IV_GUI_VER "de.blinkt.openvpn 0.6.30"
machine-readable-output
ifconfig-nowarn
client
verb 4
comp-lzo
connect-retry-max 5
connect-retry 5
resolv-retry 60
dev tun
remote xxxxxx.mobi
1199 tcp
ca [inline]
cert [inline]
key [inline]
tls-auth [inline] 1
<ca>
# insert base64 blob from
ca.crt
-----BEGIN CERTIFICATE----------END CERTIFICATE-----
</ca>
<cert>
# insert base64 blob from client1.crt
Certificate:
Data:
Version: 3 (0x2)
Serial Number: xxxxxxxxxxxxx
Signature Algorithm:
sha256WithRSAEncryption
Issuer: C=xx, L=xxxx, O=xxxxxx, OU=xxxxxxx, CN=xxxxxxxxxxxxxxxxxx
Validity
Not Before: Dec 14 07:09:04 2015 GMT
Not After : Dec 11 07:09:04 2025 GMT
Subject:
C=xx, L=xxx, O=xxxx, OU=xxxxxxxx, CN=xxxxxxxxxxxxx Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
xxxxxxxxxxxxxxxxxxxxxxx Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic
Constraints:
CA:FALSE
Netscape Comment:
Easy-RSA Generated Certificate
X509v3 Subject Key Identifier:
xxxxxxxxxxxxxxxxxxxxxx X509v3 Authority Key Identifier:
keyid:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
DirName:/C=xx/L=xxxx/O=xxxxx/OU=xxxxx
/CN=xxxxx/name=EasyRSA/emailAddress=xxxxxxxxxxx
serial:xxxxxxxxxxxxxxxxxxxxxxxx
X509v3 Extended Key Usage:
TLS Web Client Authentication
X509v3 Key Usage:
Digital Signature
X509v3 Subject Alternative Name:
DNS:xxxxxx
Signature Algorithm: sha256WithRSAEncryption
xxxxxxxxxxxxxxxxxxx--------xxxxxxxxxxxxxxxxxxx
-----BEGIN CERTIFICATE----------END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
-----END PRIVATE KEY-----
</key>
<tls-auth>
# insert ta.key
# 2048 bit OpenVPN static key
-----BEGIN -----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1
# Use system proxy
setting
management-query-proxy
