client
dev tun
proto udp
remote vpn.example.org
port 1194
resolv-retry infinite
nobind
persist-key
persist-tun
# use this to point to certificates or embed them directly in file like below
#ca ca.crt
#cert client.crt
#key client.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-CBC
verb 3
# embedded certificates
... CA certificate
... client's key
... client's certificate
... tls-auth ta.key