client
dev tun

proto udp
remote vpn.example.org
port 1194

resolv-retry infinite

nobind

persist-key
persist-tun

# use this to point to certificates or embed them directly in file like below
#ca ca.crt
#cert client.crt
#key client.key

remote-cert-tls server

tls-auth ta.key 1

cipher AES-256-CBC

verb 3


# embedded certificates
<ca>
... CA certificate
</ca>
<key>
... client's key
</key>
<cert>
... client's certificate
</cert>
<tls-auth>
... tls-auth ta.key
</tls-auth>