Review current openvpn configuration

- tls-client unneeded if client is specified
- Moved settings around in config file
This commit is contained in:
Quentin McGaw
2020-05-29 10:29:07 +00:00
parent c85cca7fdc
commit cc80d224c2
3 changed files with 4 additions and 6 deletions

View File

@@ -48,12 +48,11 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, verbosi
"nobind", "nobind",
"persist-key", "persist-key",
"persist-tun", "persist-tun",
"tls-client",
"remote-cert-tls server", "remote-cert-tls server",
"ping 10",
"ping-restart 60",
// Mullvad specific // Mullvad specific
"ping 10",
"ping-restart 60",
"sndbuf 524288", "sndbuf 524288",
"rcvbuf 524288", "rcvbuf 524288",
"tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA", "tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA",

View File

@@ -86,11 +86,10 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, encrypt
"nobind", "nobind",
"persist-key", "persist-key",
"persist-tun", "persist-tun",
"tls-client",
"remote-cert-tls server", "remote-cert-tls server",
"ping 300", // Ping every 5 minutes to prevent a timeout error
// PIA specific // PIA specific
"ping 300", // Ping every 5 minutes to prevent a timeout error
"reneg-sec 0", "reneg-sec 0",
"compress", // allow PIA server to choose the compression to use "compress", // allow PIA server to choose the compression to use

View File

@@ -63,11 +63,11 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, verbosi
"nobind", "nobind",
"persist-key", "persist-key",
"persist-tun", "persist-tun",
"remote-cert-tls server",
// Windscribe specific // Windscribe specific
"resolv-retry infinite", "resolv-retry infinite",
"comp-lzo", "comp-lzo",
"remote-cert-tls server",
"key-direction 1", "key-direction 1",
// Added constant values // Added constant values