# Client mode
client

# IPv6 tunnel
dev tun

# TCP protocol

proto udp

# Address/Port of VPN server
remote SERVER PORT

# Don't bind to local port/address
nobind

# Don't need to re-read keys and re-create tun at restart
persist-key
persist-tun

# User/Group
;user nobody
;group nobody

# Remote peer must have a signed certificate
remote-cert-tls server
ns-cert-type server
#auth-user-pass
cipher AES-256-CBC 
ignore-unknown-option block-outside-dns
block-outside-dns
# Enable compression
comp-lzo

<ca>
-----BEGIN CERTIFICATE-----
CA
-----END CERTIFICATE-----
</ca>
<cert>
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: C=IT, ST=MI, L=Milano, O=6Project, OU=NETSIX, CN=6Project CA/name=server/emailAddress=support@6project.org
        Validity
            Not Before: Jun  8 10:57:12 2022 GMT
            Not After : Jun  5 10:57:12 2032 GMT
        Subject: C=IT, ST=MI, L=Milano, O=6Project, OU=NETSIX, CN=mikekoke/name=server/emailAddress=support@6project.org
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:32:7b:a6:4f:bd:a0:58:21:83:1b:10:f0:
                    51:98:1d:87:6c:c8:ff:01:b0:5a:da:d4:02:6c:7b:
                    52:7a:dc:8c:ca:1d:63:14:e9:71:80:92:fe:c1:59:
                    73:cd:43:ae:1e:71:21:61:db:b4:25:eb:ee:a6:13:
                    ba:8c:58:6a:f8:fa:56:2d:0a:e4:67:44:b0:ba:05:
                    7f:74:4b:5e:3:a0:a5:61:c1:
                    95:b3:19:36:65:13:7e:f1:dc:a0:d6:20:b7:f9:dc:
                    a2:52:39:e6:7d:ed:67:47:5a:21:c5:10:38:c6:0c:
                    df:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                Easy-RSA Generated Certificate
            X509v3 Subject Key Identifier: 
                5E:D8:D5:AB:EF:3F:E3:D8:1:11:34:7C:60:7B:D1:74:7C
            X509v3 Authority Key Identifier: 
                keyid:FB:D0:7B:9A:62:A4:05:EE:A2:2B:C6:ED:2B:6C
                DirName:/C=IT/ST=MI/L=Milano/O=6Project/OU=NETSIX/CN=6Project CA/name=server/emailAddress=support@6project.org
                serial:E9:7F:8D:EC:4B:10:86:18

            X509v3 Extended Key Usage: 
                TLS Web Client Authentication
            X509v3 Key Usage: 
                Digital Signature
            X509v3 Subject Alternative Name: 
                DNS:mikekoke
    Signature Algorithm: sha256WithRSAEncryption
         8d:05:a4:26:8b:6b:fd:1c:25:cd:1c:80:0e:84:f7:e9:f1:21:
         73:bd:58:a0:16:a7:c0:95:a8:25:c0:a0:2d:77:10:cf:dd:54:
         fe:96:ea:3f:46:56:97:44:17:9a:39:b3:e9:96:
         cc:c0:ff:da:8f:26:79:ff:16:35:76:11:7d:32:3e:47:15:49:
         44:14:9d:dc:a0:98:fc:16:81:5a:77:79:04:11:b7:e9:4d:63:
         48:55:9b:8d:49:91:3e:fc:89:2d:47:76:60:a7:b2:25:74:94:
         7f:d0:b8:9f:00:17:4d:89:ab:c0:c0:a8:e7:c7:9c:ae:80:cc:
         bd:d8:4c:bb
-----BEGIN CERTIFICATE-----
CERT
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
KEY
-----END PRIVATE KEY-----
</key>