client
dev tun

<connection>
remote vpn.example.com 1194 udp
nobind
connect-timeout 15
</connection>

resolv-retry infinite

persist-key
persist-tun

remote-cert-tls server

verb 3
mute 20

#cipher AES-256-CBC
#cipher AES-128-CBC
#cipher AES-256-GCM
#cipher AES-128-GCM

#data-ciphers "AES-256-CBC:AES-128-CBC:AES-256-GCM:AES-128-GCM"

#auth sha256
#auth-nocache

<ca>
-----BEGIN CERTIFICATE-----
...
-----END CERTIFICATE-----
</ca>