Review current openvpn configuration

- tls-client unneeded if client is specified
- Moved settings around in config file
This commit is contained in:
Quentin McGaw
2020-05-29 10:29:07 +00:00
parent c85cca7fdc
commit cc80d224c2
3 changed files with 4 additions and 6 deletions

View File

@@ -48,12 +48,11 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, verbosi
"nobind",
"persist-key",
"persist-tun",
"tls-client",
"remote-cert-tls server",
"ping 10",
"ping-restart 60",
// Mullvad specific
"ping 10",
"ping-restart 60",
"sndbuf 524288",
"rcvbuf 524288",
"tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA",

View File

@@ -86,11 +86,10 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, encrypt
"nobind",
"persist-key",
"persist-tun",
"tls-client",
"remote-cert-tls server",
"ping 300", // Ping every 5 minutes to prevent a timeout error
// PIA specific
"ping 300", // Ping every 5 minutes to prevent a timeout error
"reneg-sec 0",
"compress", // allow PIA server to choose the compression to use

View File

@@ -63,11 +63,11 @@ func (c *configurator) BuildConf(connections []models.OpenVPNConnection, verbosi
"nobind",
"persist-key",
"persist-tun",
"remote-cert-tls server",
// Windscribe specific
"resolv-retry infinite",
"comp-lzo",
"remote-cert-tls server",
"key-direction 1",
// Added constant values