mlock
remote-cert-tls server
tun-ipv6
client
dev tun
resolv-retry infinite
nobind
user nobody
group nobody
persist-key
persist-tun
ns-cert-type server
comp-lzo yes
proto udp
remote a.b.c.d 1194
proto tcp-client
remote a.b.c.d 443
-----BEGIN RSA PRIVATE KEY-----
...
-----END RSA PRIVATE KEY-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----