-
Notifications
You must be signed in to change notification settings - Fork 0
/
client.ovpn
143 lines (137 loc) · 6.34 KB
/
client.ovpn
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
# THIS IS THE EXAMPLE OF AN OVPN CLIENT
# GENERATE THE ONE FROM OVPN CLIENT DASHBOARD
# ONCE GENRETATED THE SCRIPT WILL CHANGE THE IP
# WITH THE NEW PUBLIC IP EACH TIME THE SERVER IS
# STARTED AND USE IT TO CONNECT.
# Automatically generated OpenVPN client config file
# Generated on Mon Sep 2 16:38:40 2024 by ip-172-31-27-44
# Note: this config file contains inline private keys
# and therefore should be kept confidential!
# Certificate serial: 4863684034162828256, certificate common name: openvpn
# Expires 2034-08-31 16:38:40
# Note: this configuration is user-locked to the username below
# OVPN_ACCESS_SERVER_USERNAME=openvpn
# Define the profile name of this particular configuration file
# OVPN_ACCESS_SERVER_PROFILE=openvpn@<EC2-PUBLIC-IP>
# Default Cipher
cipher AES-256-CBC
# OVPN_ACCESS_SERVER_CLI_PREF_ALLOW_WEB_IMPORT=True
# OVPN_ACCESS_SERVER_CLI_PREF_BASIC_CLIENT=False
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_CONNECT=False
# OVPN_ACCESS_SERVER_CLI_PREF_ENABLE_XD_PROXY=True
# OVPN_ACCESS_SERVER_WSHOST=<EC2-PUBLIC-IP>:443
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_START
# -----BEGIN CERTIFICATE-----
# MIIB0jCCAVegAwIBAgIEZr7xXzAKBggqhkjOPQQDAjBBMT8wPQYDVQQDDDZPcGVu
# VlBOIFdlYiBDQSAyMDI0LjA4LjE2IDA2OjI3OjQzIFVUQyBpcC0xNzItMzEtMjct
# NDQwHhcNMjQwODE1MDYyNzQzWhcNMzQwODE0MDYyNzQzWjBBMT8wPQYDVQQDDDZP
# cGVuVlBOIFdlYiBDQSAyMDI0LjA4LjE2IDA2OjI3OjQzIFVUQyBpcC0xNzItMzEt
# MjctNDQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATgqcojk+NsKAeS5bPc+v8A5Vyu
# 0dCQHLAW3Q4+CtDna2Hj6NZg1xu5/zkT28uZTcme79gDBPpkj1oOI0JvMUcfTQES
# XgrHUmyw0irsRIDR2UxzDe/f2JvvgsBbWgyZx/ujIDAeMA8GA1UdEwEB/wQFMAMB
# Af8wCwYDVR0PBAQDAgEGMAoGCCqGSM49BAMCA2kAMGYCMQCf2CuloT+HmFTD8ctW
# kyQiw1dISlxFIjnzLjs1Zw11S2/yhtRHxKvDy+MttCM8jrYCMQD+EOFkwu2Ss5RC
# sY6YpIv+QB8nVtkuePHO8ClHHBCWE8+lgEySOYJlwirRcHT6ma4=
# -----END CERTIFICATE-----
# OVPN_ACCESS_SERVER_WEB_CA_BUNDLE_STOP
# OVPN_ACCESS_SERVER_IS_OPENVPN_WEB_CA=1
client
server-poll-timeout 4
nobind
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 443 tcp
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 1194 udp
remote <EC2-PUBLIC-IP> 1194 udp
dev tun
dev-type tun
remote-cert-tls server
tls-version-min 1.2
reneg-sec 604800
tun-mtu 1420
auth-user-pass
verb 3
push-peer-info
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDCbWpfhhNqSBArkxt+2
EHr7JzDdlvsOfjGfcUntQG8GzsJVzzLy2Wq1upjiYxyAeP6hZANiAARhJ/2wRBky
5A/9Pl76JyvRCX4YqTtv6K8bGJbiC/4nK/76722BdvHAa4STndnDNlFE/NxY3Bzd
fa/UKLpi+tVj0tbmf4OU4dw4D+vOKQYa+5gZsZSu6UMdXmVSSX2EWOE=
-----END PRIVATE KEY-----
</key>
<tls-crypt-v2>
-----BEGIN OpenVPN tls-crypt-v2 client key-----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-----END OpenVPN tls-crypt-v2 client key-----
</tls-crypt-v2>
## -----BEGIN RSA SIGNATURE-----
## DIGEST:sha256
## MGUCMQDoZ9ZdkiyDBYWCtrrPWek1VBSanLxfJrH2kSmTAWOZIl
## HhR0DxvI5qKbcnXOOaH34CMHJCsdccDXjbcZdQDpwvIjdOdPra
## Xc1De2nUNQcucmlm5GkIzHIqwNiXTnE/P0BQKQ==
## -----END RSA SIGNATURE-----
## -----BEGIN CERTIFICATE-----
## MIIB1DCCAVqgAwIBAgIEZr7xYDAKBggqhkjOPQQDAjBBMT8wPQYDVQQDDDZPcGVu
## VlBOIFdlYiBDQSAyMDI0LjA4LjE2IDA2OjI3OjQzIFVUQyBpcC0xNzItMzEtMjct
## NDQwHhcNMjQwODE1MDYyNzQ0WhcNMjUwODE2MDYyNzQ0WjAYMRYwFAYDVQQDDA0x
## My4yMTUuMTc3LjI2MHYwEAYHKoZIzj0CAQYFK4EEACIDYgAE6RSFheuPC0I307aX
## i+QK638BeW7HEYpMH/r8St8lGmH7yRqclW6l2XBi4QaTJ7b4K25elK026zY2MaDF
## JZvo4Qv64w+IK/qRLwfHvdv+Y0TBJJ1v+01R8orPXi0WgDlPo0wwSjAMBgNVHRMB
## Af8EAjAAMAsGA1UdDwQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAYBgNVHREE
## ETAPgg0xMy4yMTUuMTc3LjI2MAoGCCqGSM49BAMCA2gAMGUCMQCrHC6yO5bU9RFA
## Ly81t/E4Qi8fEhsFByO/cPXmzIvRfgUzxlAUTfn26euGrjUJd0YCMCrVq4YAwIJk
## gBc1/s/vVsb2LfFDTMrPWRwZXBSI5CPzGbC8uUpI9tzdKwjwRboxaQ==
## -----END CERTIFICATE-----
## -----BEGIN CERTIFICATE-----
## MIIB0jCCAVegAwIBAgIEZr7xXzAKBggqhkjOPQQDAjBBMT8wPQYDVQQDDDZPcGVu
## VlBOIFdlYiBDQSAyMDI0LjA4LjE2IDA2OjI3OjQzIFVUQyBpcC0xNzItMzEtMjct
## NDQwHhcNMjQwODE1MDYyNzQzWhcNMzQwODE0MDYyNzQzWjBBMT8wPQYDVQQDDDZP
## cGVuVlBOIFdlYiBDQSAyMDI0LjA4LjE2IDA2OjI3OjQzIFVUQyBpcC0xNzItMzEt
## MjctNDQwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAATgqcojk+NsKAeS5bPc+v8A5Vyu
## 0dCQHLAW3Q4+CtDna2Hj6NZg1xu5/zkT28uZTcme79gDBPpkj1oOI0JvMUcfTQES
## XgrHUmyw0irsRIDR2UxzDe/f2JvvgsBbWgyZx/ujIDAeMA8GA1UdEwEB/wQFMAMB
## Af8wCwYDVR0PBAQDAgEGMAoGCCqGSM49BAMCA2kAMGYCMQCf2CuloT+HmFTD8ctW
## kyQiw1dISlxFIjnzLjs1Zw11S2/yhtRHxKvDy+MttCM8jrYCMQD+EOFkwu2Ss5RC
## sY6YpIv+QB8nVtkuePHO8ClHHBCWE8+lgEySOYJlwirRcHT6ma4=
## -----END CERTIFICATE-----