[stonevpn conf]
# CA certificate file
cacertfile = '/openvpn-pki/open/easy-rsa/keys/ca.crt'
# CA private key file (make sure running user has read rights!)
cakeyfile = '/openvpn-pki/open/easy-rsa/keys/ca.key'
# This is needed to search for free IP-addresses
openvpnconf = '/openvpn/openvpn/server.conf'
# Search for free IP-adresses by parsing the files in this dir
ccddir = '/openvpn/openvpn/ccd'
# Temporary working dir (will be created if it doesn't exist)
working = '/openvpn-pki/open/easy-rsa/client_keys'
# OpenSSL configuration file
opensslconf = '/openvpn-pki/open/easy-rsa/openssl.cnf.stonevpn'
# push router ip (Only used with '--free-ip' parameter)
pushrouter = '192.168.201.0'
# Certificate Revocation List (CRL) file
crlfile = '/openvpn-pki/open/easy-rsa/keys/stonevpn.crl'
# if using password, which cipher method to use (openssl --help)
cipher = 'des3'
# prefix all files with:
prefix = 'sds-'
# For emailing generated files, specify SMTP server
mail_server = '127.0.0.1'
# Send CC to (leave blank (mail_cc = '') for none)
mail_cc = 'admin@sdsys.ru'
# Email 'From' address
mail_from = 'stonevpn@sdsys.ru'
# Mail body (HTML formatted), don't change keyword EMAILRECIPIENT
mail_msg = "Hi EMAILRECIPIENT,
Attached with this e-mail are the generated configuration file and certificates for use with your VPN connection. PASSPHRASETXT If you have any questions, please contact support
Kind regards,
The Support department."
# Text to include when specifying a passhprase. This will be inserted
# in 'mail_msg' on placeholder PASSPRASETXT. If you don't use it, PASSPHRASETXT
# will be blanked out. Also, don't change keyword OPENSSLPASS as this will be
# replaced by the actual passphrase.
mail_passtxt = '
For security purposes, your key is encrypted with this password:
OPENSSLPASS
You will be prompted for this password when establishing a connection.' [windows conf] # add options to be added to the configuration file here # it doesn't really matter what the variable's name is :) dev = 'dev tun' ip = 'remote gate41.infoclinica.ru' ip2 = 'remote gate42.infoclinica.ru' # uncomment the next 3 lines to add redundant routers: # remote-random resretry = 'resolv-retry 60' # ip2 = 'remote 23.45.67.89' port = 'port 1194' nobind = 'nobind' mssfix = 'mssfix 1300' client = 'client' tls = 'tls-client' # actually for the next 3 vars, the name _does_ matter since # we'll do some string replace stuff (to get the right filename) ca = 'ca cacertfile' cert = 'cert clientcertfile' key = 'key clientkeyfile' tlsauth = 'tls-auth ta.key 1' lzo = 'comp-lzo' ping = 'ping 10' pingrestart = 'ping-restart 30' pingtimer = 'ping-timer-rem' #persisttun = 'persist-tun' persistkey = 'persist-key' verb = 'verb 3' prot = 'proto udp' float = 'float' [unix conf] # add options to be added to the configuration file here # it doesn't really matter what the variable's name is :) dev = 'dev tun' ip = 'remote gate41.infoclinica.ru' ip2 = 'remote gate42.infoclinica.ru' # uncomment the next 3 lines to add redundant routers: # remote-random resretry = 'resolv-retry 60' # ip2 = 'remote 23.45.67.89' port = 'port 1194' nobind = 'nobind' mssfix = 'mssfix 1300' client = 'client' tls = 'tls-client' # actually for the next 3 vars, the name _does_ matter since # we'll do some string replace stuff (to get the right filename) ca = 'ca cacertfile' cert = 'cert clientcertfile' key = 'key clientkeyfile' tlsauth = 'tls-auth ta.key 1' lzo = 'comp-lzo' ping = 'ping 10' pingrestart = 'ping-restart 30' pingtimer = 'ping-timer-rem' #persisttun = 'persist-tun' persistkey = 'persist-key' verb = 'verb 3' prot = 'proto udp' float = 'float' [mac conf] # add options to be added to the configuration file here daemon = 'daemon' dev = 'dev tap' ip = 'remote gate32.sdsys.ru' # uncomment the next 3 lines to add redundant routers: # remote-random # resolv-retry 60 # ip2 = 'remote 23.45.67.89' port = 'port 1194' mssfix = 'mssfix 1300' client = 'client' tlc = 'tls-client' # don't touch the next 3 var names: ca = 'ca /Library/openvpn/cacertfile' cert = 'cert /Library/openvpn/clientcertfile' key = 'key /Library/openvpn/clientkeyfile' tlsauth = 'tls-auth /Library/openvpn/ta.key 1' lzo = 'comp-lzo' ping = 'ping 10' pingrestart = 'ping-restart 30' pingtimer = 'ping-timer-rem' #persisttun = 'persist-tun' persistkey = 'persist-key' verb = 'verb 3' prot = 'proto udp' [android conf] # add options to be added to the configuration file here daemon = 'daemon' dev = 'dev tun' ip = 'remote web-gate.sdsys.ru' # uncomment the next 3 lines to add redundant routers: # remote-random # resolv-retry 60 # ip2 = 'remote 23.45.67.89' port = 'port 1194' #mssfix = 'mssfix 1300' client = 'client' tlc = 'tls-client' lzo = 'comp-lzo' ping = 'ping 15' pingrestart = 'ping-restart 45' pingtimer = 'ping-timer-rem' #persisttun = 'persist-tun' persistkey = 'persist-key' verb = 'verb 3' prot = 'proto tcp'