mlock remote-cert-tls server tun-ipv6 client dev tun resolv-retry infinite nobind user nobody group nobody persist-key persist-tun ns-cert-type server comp-lzo yes proto udp remote a.b.c.d 1194 proto tcp-client remote a.b.c.d 443 -----BEGIN RSA PRIVATE KEY----- ... -----END RSA PRIVATE KEY----- -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE-----