ovpn-certman/assets/templates/files/config.ovpn
cpp 01f69a6b05 add auth-nocache to config template
This fixes a warning about cached passwords thats being issued by openvpn when starting. As far as I can see, this only is a security issue if an attacker has the possibility to read arbitrary memory regions. The warning is unaesthetic, tho, so I want to get rid of it.
2021-05-21 18:10:35 +02:00

33 lines
601 B
Text

{{ define "base" }}# Client configuration for {{ .User }}@{{ .Name }}
client
dev {{ .Dev }}
remote {{ .Host }} {{ .Port }} {{ .Proto }}
resolv-retry infinite
nobind
persist-key
persist-tun
cipher AES-256-GCM
auth SHA512
auth-nocache
remote-cert-tls server
key-direction 1
tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-128-GCM-SHA256:TLS-DHE-RSA-WITH-AES-128-CBC-SHA256
tls-version-min 1.2
verb 3
<ca>
{{ .CA | html }}</ca>
<cert>
{{ .Cert | html }}</cert>
<key>
{{ .Key | html }}</key>
<tls-auth>
{{ .TA | html }}</tls-auth>
{{ end }}