cpp
01f69a6b05
This fixes a warning about cached passwords thats being issued by openvpn when starting. As far as I can see, this only is a security issue if an attacker has the possibility to read arbitrary memory regions. The warning is unaesthetic, tho, so I want to get rid of it.
34 lines
601 B
Plaintext
34 lines
601 B
Plaintext
{{ define "base" }}# Client configuration for {{ .User }}@{{ .Name }}
|
|
client
|
|
dev {{ .Dev }}
|
|
remote {{ .Host }} {{ .Port }} {{ .Proto }}
|
|
resolv-retry infinite
|
|
nobind
|
|
persist-key
|
|
persist-tun
|
|
|
|
cipher AES-256-GCM
|
|
auth SHA512
|
|
auth-nocache
|
|
|
|
remote-cert-tls server
|
|
key-direction 1
|
|
|
|
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
|
|
tls-version-min 1.2
|
|
|
|
verb 3
|
|
|
|
<ca>
|
|
{{ .CA | html }}</ca>
|
|
|
|
<cert>
|
|
{{ .Cert | html }}</cert>
|
|
|
|
<key>
|
|
{{ .Key | html }}</key>
|
|
|
|
<tls-auth>
|
|
{{ .TA | html }}</tls-auth>
|
|
{{ end }}
|