pivpn/files/etc/openvpn/easy-rsa/pki/Default.txt

client
dev tun
proto udp
remote IPv4pub 1194
resolv-retry infinite
nobind
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name SRVRNAME name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
First commit of reworked installer 2016-04-19 18:01:55 +00:00			`client`
			`dev tun`
			`proto udp`
			`remote IPv4pub 1194`
			`resolv-retry infinite`
			`nobind`
			`key-direction 1`
Ubuntu uses openvpn repo to get newer version and... clients get two more security parameters to harden connection further and... hopefully fix use of testing branch and... why is there no modern Road Rash game, that was the best. 2016-05-07 16:33:52 +00:00			`remote-cert-tls server`
Fix TLS handshake error When connecting with Tunnelblick client I received following error: TLS_ERROR: BIO read tls_read_plaintext error: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol TLS Error: TLS object -> incoming plaintext read error TLS Error: TLS handshake failed To fix the problem the same tls-version-min directive used in server configuration has to be added to the client config. 2016-05-18 09:30:55 +00:00			`tls-version-min 1.2`
Ubuntu uses openvpn repo to get newer version and... clients get two more security parameters to harden connection further and... hopefully fix use of testing branch and... why is there no modern Road Rash game, that was the best. 2016-05-07 16:33:52 +00:00			`verify-x509-name SRVRNAME name`
Increase default levels of security 2016-04-23 19:08:14 +00:00			`cipher AES-256-CBC`
			`auth SHA256`
Add auth-nocache option to client. 2018-08-31 23:05:24 +00:00			`auth-nocache`
2.4 2018-02-15 09:14:03 +00:00			`verb 3`