######################################################################## # Die Client-Server Verbindung ist im Fulltunnel-Modus, d.h. alle # Datenpakete gehen ueber die verschluesselte Verbindung zum VPN-Server # der FAU (z.B. fuer die Nutzung eines unverschluesselten WLANs oder # den Zugriff auf Bibliotheksdienste). ######################################################################## # Wir sind der Client client # Verbindung per IP-Netz, nicht per Bridge dev tun # UDP, weils schneller ist proto udp # Der Server remote 131.188.12.11 1194 # Keep trying indefinitely to resolve the # host name of the OpenVPN server. Very useful # on machines which are not permanently connected # to the internet such as laptops. resolv-retry infinite # Most clients don't need to bind to # a specific local port number. nobind # Downgrade privileges after initialization (non-Windows only) ;user nobody ;group nobody # Try to preserve some state across restarts. persist-key persist-tun # If you are connecting through an # HTTP proxy to reach the actual OpenVPN # server, put the proxy server/IP and # port number here. See the man page # if your proxy server requires # authentication. ;http-proxy-retry # retry on connection failures ;http-proxy [proxy server] [proxy port #] # Wireless networks often produce a lot # of duplicate packets. Set this flag # to silence duplicate packet warnings. mute-replay-warnings # Der Benutzer authentifiziert sich per Username/Passwort auth-user-pass # Verify server certificate by checking # that the certicate has the nsCertType # field set to "server". This is an # important precaution to protect against # a potential attack discussed here: # http://openvpn.net/howto.html#mitm ns-cert-type server # Select a cryptographic cipher. # If the cipher option is used on the server # then you must also specify it here. cipher AES-256-CBC # Jedes Byte weniger ist gut comp-lzo # 0 waeren nur fatale Fehler # 1 ist normal # 3 ist eine gute Mischung verb 3 # Wenn 5 mal das gleiche geloggt wird, glauben wirs mute 5 # Zertifikat unserer OpenVPN-CA -----BEGIN CERTIFICATE----- MIIEwTCCA6mgAwIBAgIJAI8iVibEJ4B6MA0GCSqGSIb3DQEBBQUAMIGbMQswCQYD VQQGEwJERTEPMA0GA1UECBMGQmF5ZXJuMREwDwYDVQQHEwhFcmxhbmdlbjEoMCYG A1UEChMfVW5pdmVyc2l0YWV0IEVybGFuZ2VuLU51ZXJuYmVyZzENMAsGA1UECxME UlJaRTEUMBIGA1UEAxMLUlJaRS1WUE4tQ0ExGTAXBgkqhkiG9w0BCQEWCnZwbkBm YXUuZGUwHhcNMTQwMzAzMTMyOTU3WhcNMjQwMjI5MTMyOTU3WjCBmzELMAkGA1UE BhMCREUxDzANBgNVBAgTBkJheWVybjERMA8GA1UEBxMIRXJsYW5nZW4xKDAmBgNV BAoTH1VuaXZlcnNpdGFldCBFcmxhbmdlbi1OdWVybmJlcmcxDTALBgNVBAsTBFJS WkUxFDASBgNVBAMTC1JSWkUtVlBOLUNBMRkwFwYJKoZIhvcNAQkBFgp2cG5AZmF1 LmRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZpv+12VRU8CNmyq WRs8JR9Q2/ENcL5DrUqBj5+VnhwaGrXTl/3Cl4U++prYm2FJbG2TF14TJxZnPmxO /fJPTZGkSp/n2+p+OTJQ9OIqUFp0CJVYbLs8G7pXp0c/uNbDdR3FYutdsAJ5zDFg +/xBYtGmVsFStxDT7+lgS5f4yClCEXP1IC90Vf79vRiXnJtPye2ojNgYot0rJJiE FxqOv9aulVEcG5ViqyrB8cVorwwABtPLHTN037m9swvj1pqaE8vFlb1vzf2+T1a1 7FASDzHIUQRMhHIgaqOO0I2vE5u1qHegH8WyAbEO1aoJnd1Hzg55JLkHcDBS2GFf prL59wIDAQABo4IBBDCCAQAwHQYDVR0OBBYEFFlKWIzTZp2N8j4JpB3Xst46MbG1 MIHQBgNVHSMEgcgwgcWAFFlKWIzTZp2N8j4JpB3Xst46MbG1oYGhpIGeMIGbMQsw CQYDVQQGEwJERTEPMA0GA1UECBMGQmF5ZXJuMREwDwYDVQQHEwhFcmxhbmdlbjEo MCYGA1UEChMfVW5pdmVyc2l0YWV0IEVybGFuZ2VuLU51ZXJuYmVyZzENMAsGA1UE CxMEUlJaRTEUMBIGA1UEAxMLUlJaRS1WUE4tQ0ExGTAXBgkqhkiG9w0BCQEWCnZw bkBmYXUuZGWCCQCPIlYmxCeAejAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUA A4IBAQAsJY6r1kNQfSItoii2a3K/jAmBRFdkUEbDPpdNoPfF2iUgidHn/1QhCrut YX1YLFLmz8I3O1HDf50yasltOScrPAG13RTu1jpZGU+RZTWfcDgTWvC6/y27thiO 7b27C09CqqMcCo94w3Zp/QhX5BQ1OAiymzwNP2Ipn9qKyGoAS3SfFmE0Ox08QN8u ciT/vb/Njaw/wtqgUnFfHwbRqqksCtJywzNdfP3upokrID6xsLCSJg9xfa8Gy6Uo RWX+zdOt03jX6csbGJ+h6Hm11K2IiJZe/PnIrVYjpUU796nGtPbIYPWV88HXdVyE l0V7a7TdWMAIQQ+/DPXpMJsyDnUk -----END CERTIFICATE-----