# (OpenVPN client configuration file) -- using TLS mode

# Use a dynamic tun device.
dev tun

# Our remote peer
remote <SERVER>

# don't bind to port 1194 on the local socket
# (therefore a dynamic source port is used)
nobind

# TLS mode: key and certificate details
tls-client
ca keys/ca.crt
key keys/<CLIENT>.key
cert keys/<CLIENT>.crt

# only connect to servers that have a server-only key
ns-cert-type server

# Allow the server to supply routes and tunnel addresses
pull