client dev-type tun dev cryphto_tun fragment 1472 mssfix 1472 proto udp #Remote Server: Change to 53 if you are behind a restrictive firewall ;remote cryphto.org 53 remote cryphto.org 11194 resolv-retry infinite nobind ;user nobody ;group nobody persist-key persist-tun #Cert files - Substitute $user with your username #When in doubt, specify the absolute path to the files #Example Directory Tree: #/etc/openvpn/ # cryphto.conf # cryphto/ # cryphto_ca.crt # $user_cryphto.crt # $user_cryphto.key ca cryphto/cryphto_ca.crt cert cryphto/$user_cryphto.crt key cryphto/$user_cryphto.key remote-cert-tls server tls-auth cryphto/cryphto_ta.key 1 cipher AES-256-CBC verb 3 script-security 2 #Hooks - Optional ;route-up cryphto/route_cryphto_up.sh ;route-pre-down cryphto/route_cryphto_down.sh