Page 1 of 1

Client configuration commands help

Posted: Sat Dec 27, 2014 7:30 am
by antidosed
I am using OpenVPN (Viscosity Client for Win) with PrivateInternetAccess as my VPN service. I want to change my config to have this below:

Data Encryption: AES-256
Data Authentication: SHA256
Handshake: RSA4096
DNS Leak Protection enabled
IPv6 Leak Protection enabled


I just don't know the configuration commands, any help & or recommendations as to making my connection more secure would be greatly appreciated.
Also can anyone recommend a better VPN service? Thanks a bunch.

My current config file:
client
dev tun
proto udp
remote us-west.privateinternetaccess.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
tls-client
remote-cert-tls server
auth-user-pass
comp-lzo
verb 1
reneg-sec 0
crl-verify crl.pem

Re: Client configuration commands help

Posted: Sat Dec 27, 2014 12:52 pm
by maikcat
short answer,

you use EXACTLY the config file given,
BOTH sides MUST use the SAME settings.

Michael.

Re: Client configuration commands help

Posted: Sat Dec 27, 2014 4:54 pm
by Traffic
antidosed wrote:Data Encryption: AES-256
see openvpn --show-ciphers in The Manual v23x
antidosed wrote:Data Authentication: SHA256
see openvpn --show-digests in The Manual v23x
antidosed wrote:Handshake: RSA4096
You will require to create your full PKI with 4096bit key: see PKI in The HOWTO