pivpn/files/etc/openvpn/easy-rsa/pki/Default.txt
Orazio e949aadbc3 Copy files from git repo using the 'install' command, switch DH params from 2ton.com.au to RFC 7919
- Now using DH parameters suggested by the RFC 7919 for use by TLS servers (the user can
    still generate his own if he wishes).
    https://wiki.mozilla.org/Security/Archive/Server_Side_TLS_4.0#Pre-defined_DHE_groups
2020-01-31 14:07:58 +01:00

14 lines
215 B
Text

client
dev tun
proto udp
remote IPv4pub 1194
resolv-retry infinite
nobind
key-direction 1
remote-cert-tls server
tls-version-min 1.2
verify-x509-name SRVRNAME name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3