client dev tun proto udp remote vpn.example.org port 1194 resolv-retry infinite nobind persist-key persist-tun # use this to point to certificates or embed them directly in file like below #ca ca.crt #cert client.crt #key client.key remote-cert-tls server tls-auth ta.key 1 cipher AES-256-CBC verb 3 # embedded certificates ... CA certificate ... client's key ... client's certificate ... tls-auth ta.key