package ivpn import ( "strconv" "strings" "github.com/qdm12/gluetun/internal/configuration" "github.com/qdm12/gluetun/internal/constants" "github.com/qdm12/gluetun/internal/models" "github.com/qdm12/gluetun/internal/provider/utils" ) func (i *Ivpn) BuildConf(connection models.Connection, settings configuration.OpenVPN) (lines []string, err error) { if settings.Cipher == "" { settings.Cipher = constants.AES256cbc } namePrefix := strings.Split(connection.Hostname, ".")[0] lines = []string{ "client", "dev " + settings.Interface, "nobind", "tls-exit", // IVPN specific "ping 5", "remote-cert-tls server", // updated name of ns-cert-type "key-direction 1", "tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-DSS-WITH-AES-256-CBC-SHA:TLS-RSA-WITH-AES-256-CBC-SHA", // Added constant values "mute-replay-warnings", "auth-nocache", "pull-filter ignore \"auth-token\"", // prevent auth failed loops "auth-retry nointeract", "suppress-timestamps", // Modified variables "verb " + strconv.Itoa(settings.Verbosity), "auth-user-pass " + constants.OpenVPNAuthConf, "proto " + connection.Protocol, connection.OpenVPNRemoteLine(), "verify-x509-name " + namePrefix + " name-prefix", } lines = append(lines, utils.CipherLines(settings.Cipher, settings.Version)...) if settings.Auth != "" { lines = append(lines, "auth "+settings.Auth) } if settings.MSSFix > 0 { lines = append(lines, "mssfix "+strconv.Itoa(int(settings.MSSFix))) } if connection.Protocol == constants.UDP { lines = append(lines, "explicit-exit-notify") } if !settings.Root { lines = append(lines, "user "+settings.ProcUser) lines = append(lines, "persist-tun") lines = append(lines, "persist-key") } if !settings.IPv6 { lines = append(lines, `pull-filter ignore "route-ipv6"`) lines = append(lines, `pull-filter ignore "ifconfig-ipv6"`) } lines = append(lines, utils.WrapOpenvpnCA( constants.IvpnCA)...) lines = append(lines, utils.WrapOpenvpnTLSAuth( constants.IvpnOpenvpnStaticKeyV1)...) lines = append(lines, "") return lines, nil }