Provider updates (ProtonVPN, FastestVPN, TrustZone)
*Added FastestVPN (defaults to Netherlands) *Updated ProtonVPN (removed deprecated servers in Australia, added some Netherland servers, added a country wide config for Switzerland) *Updated Trust.Zone (Added all country specific servers, default is left untouched) Fixes #807 & #809
This commit is contained in:
185
openvpn/trustzone/Trust.Zone-Australia-New-South-Wales.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Australia-New-South-Wales.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote au-nsw.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Australia-Queensland.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Australia-Queensland.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote au-qld.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Australia-Victoria.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Australia-Victoria.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote au-vic.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Australia-Western-Australia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Australia-Western-Australia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote au-wa.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Austria.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Austria.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote at.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Belgium.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Belgium.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote be.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Brazil.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Brazil.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote br.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Bulgaria.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Bulgaria.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote bg.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Canada-British-Columbia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Canada-British-Columbia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ca-bc.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Canada-Ontario.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Canada-Ontario.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ca-on.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Canada-Quebec.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Canada-Quebec.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ca-qc.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Czech-Republic.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Czech-Republic.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote cz.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Denmark.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Denmark.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote dk.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Estonia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Estonia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ee.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Finland.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Finland.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote fi.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-France-Marseille.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-France-Marseille.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote fr-mrs.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-France-Paris.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-France-Paris.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote fr-par.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-France-VIP.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-France-VIP.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote fr-vip.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Germany.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Germany.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote de.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Hong-Kong.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Hong-Kong.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote hk.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Hungary.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Hungary.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote hu.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-India.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-India.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote in.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Italy.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Italy.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote it.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Japan.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Japan.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote jp.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Latvia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Latvia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote lv.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Lithuania.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Lithuania.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote lt.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Netherlands-Haarlem.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Netherlands-Haarlem.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote nl-hm.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Netherlands-Maasdijk.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Netherlands-Maasdijk.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote nl-mj.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Netherlands.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Netherlands.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote nl.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-New-Zealand.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-New-Zealand.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote nz.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Norway.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Norway.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote no.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Poland.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Poland.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote pl.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Romania.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Romania.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ro.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Russian-Federation.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Russian-Federation.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ru.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Singapore.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Singapore.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote sg.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-South-Africa.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-South-Africa.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote za.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Spain.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Spain.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote es.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Sweden.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Sweden.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote se.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Switzerland.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Switzerland.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ch.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Turkey.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Turkey.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote tr.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-Ukraine.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-Ukraine.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote ua.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-Kingdom-London.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-Kingdom-London.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote uk-lcy.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-Kingdom-Manchester.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-Kingdom-Manchester.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote uk-man.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Arizona.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Arizona.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-az.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-California-2.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-California-2.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ca2.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-California.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-California.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ca.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Colorado.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Colorado.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-co.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-dc.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Florida.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Florida.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-fl.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Georgia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Georgia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ga.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Hawaii.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Hawaii.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-hi.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Illinois.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Illinois.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-il.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Kentucky.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Kentucky.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ky.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Louisiana.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Louisiana.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-la.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Maryland.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Maryland.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-md.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Massachusetts.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Massachusetts.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ma.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Mississippi.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Mississippi.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ms.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Missouri.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Missouri.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-mo.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-New-Jersey.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-New-Jersey.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-nj.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-New-York.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-New-York.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ny.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Ohio.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Ohio.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-oh.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Oklahoma.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Oklahoma.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ok.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Oregon.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Oregon.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-or.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-South-Carolina.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-South-Carolina.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-sc.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Texas.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Texas.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-tx.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Utah.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Utah.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-ut.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Virginia.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Virginia.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-va.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Washington.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Washington.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-wa.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
185
openvpn/trustzone/Trust.Zone-United-States-Wisconsin.ovpn
Normal file
185
openvpn/trustzone/Trust.Zone-United-States-Wisconsin.ovpn
Normal file
@@ -0,0 +1,185 @@
|
||||
###############################################################################
|
||||
# OpenVPN 2.0 Sample Configuration File
|
||||
#
|
||||
# !!! AUTO-GENERATED !!!
|
||||
#
|
||||
# !!! YOU HAVE TO REVIEW IT BEFORE USE AND MODIFY IT AS NECESSARY !!!
|
||||
#
|
||||
# This configuration file is auto-generated. You might use this config file
|
||||
# However, before you try it, you should review the descriptions of the file
|
||||
# to determine the necessity to modify to suitable for your real environment.
|
||||
# If necessary, you have to modify a little adequately on the file.
|
||||
# For example, the IP address or the hostname as a destination VPN Server
|
||||
# should be confirmed.
|
||||
#
|
||||
# Note that to use OpenVPN 2.0, you have to put the certification file of
|
||||
# the destination VPN Server on the OpenVPN Client computer when you use this
|
||||
# config file. Please refer the below descriptions carefully.
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the type of the layer of the VPN connection.
|
||||
#
|
||||
# To connect to the VPN Server as a "Remote-Access VPN Client PC",
|
||||
# specify 'dev tun'. (Layer-3 IP Routing Mode)
|
||||
#
|
||||
# To connect to the VPN Server as a bridging equipment of "Site-to-Site VPN",
|
||||
# specify 'dev tap'. (Layer-2 Ethernet Bridgine Mode)
|
||||
|
||||
dev tun
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Specify the underlying protocol beyond the Internet.
|
||||
# Note that this setting must be correspond with the listening setting on
|
||||
# the VPN Server.
|
||||
#
|
||||
# Specify either 'proto udp' or 'proto udp'.
|
||||
|
||||
proto udp
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The destination hostname / IP address, and port number of
|
||||
# the target VPN Server.
|
||||
#
|
||||
# You have to specify as 'remote <HOSTNAME> <PORT>'. You can also
|
||||
# specify the IP address instead of the hostname.
|
||||
#
|
||||
# Note that the auto-generated below hostname are a "auto-detected
|
||||
# IP address" of the VPN Server. You have to confirm the correctness
|
||||
# beforehand.
|
||||
#
|
||||
# When you want to connect to the VPN Server by using TCP protocol,
|
||||
# the port number of the destination TCP port should be same as one of
|
||||
# the available TCP listeners on the VPN Server.
|
||||
#
|
||||
# When you use UDP protocol, the port number must same as the configuration
|
||||
# setting of "OpenVPN Server Compatible Function" on the VPN Server.
|
||||
|
||||
# Note: The below hostname is came from the Dynamic DNS Client function
|
||||
# which is running on the VPN Server. If you don't want to use
|
||||
# the Dynamic DNS hostname, replace it to either IP address or
|
||||
# other domain's hostname.
|
||||
|
||||
remote us-wi.trust.zone 443
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The HTTP/HTTPS proxy setting.
|
||||
#
|
||||
# Only if you have to use the Internet via a proxy, uncomment the below
|
||||
# two lines and specify the proxy address and the port number.
|
||||
# In the case of using proxy-authentication, refer the OpenVPN manual.
|
||||
|
||||
;http-proxy-retry
|
||||
;http-proxy [proxy server] [proxy port]
|
||||
|
||||
|
||||
###############################################################################
|
||||
# The encryption and authentication algorithm.
|
||||
#
|
||||
# Default setting is good. Modify it as you prefer.
|
||||
# When you specify an unsupported algorithm, the error will occur.
|
||||
#
|
||||
# The supported algorithms are as follows:
|
||||
# cipher: AES-128-CBC AES-192-CBC AES-256-CBC BF-CBC
|
||||
# CAST-CBC CAST5-CBC DES-CBC DES-EDE-CBC DES-EDE3-CBC DESX-CBC
|
||||
# RC2-40-CBC RC2-64-CBC RC2-CBC
|
||||
# auth: SHA SHA1 MD5 MD4 RMD160 SHA256 SHA384 SHA512
|
||||
|
||||
cipher AES-256-CBC
|
||||
auth SHA512
|
||||
#auth-nocache
|
||||
|
||||
|
||||
###############################################################################
|
||||
# Other parameters necessary to connect to the VPN Server.
|
||||
#
|
||||
# It is not recommended to modify it unless you have a particular need.
|
||||
|
||||
resolv-retry infinite
|
||||
nobind
|
||||
persist-key
|
||||
client
|
||||
verb 3
|
||||
auth-user-pass /config/openvpn-credentials.txt
|
||||
|
||||
verify-x509-name *.trust.zone name
|
||||
|
||||
ping 3
|
||||
ping-restart 10
|
||||
|
||||
#remote-cert-tls server
|
||||
#remote-cert-ku f6
|
||||
|
||||
dhcp-option DNS 109.236.87.2
|
||||
dhcp-option DNS 144.217.75.55
|
||||
|
||||
#uncomment next line if you want your OpenVPN client to ignore DNS settings pushed from VPN server
|
||||
#pull-filter ignore "dhcp-option DNS "
|
||||
|
||||
setenv CLIENT_CERT 0
|
||||
|
||||
###############################################################################
|
||||
# The certificate file of the destination VPN Server.
|
||||
#
|
||||
# The CA certificate file is embedded in the inline format.
|
||||
# You can replace this CA contents if necessary.
|
||||
# Please note that if the server certificate is not a self-signed, you have to
|
||||
# specify the signer's root certificate (CA) here.
|
||||
|
||||
<ca>
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIElDCCA3ygAwIBAgIQAf2j627KdciIQ4tyS8+8kTANBgkqhkiG9w0BAQsFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0xMzAzMDgxMjAwMDBaFw0yMzAzMDgxMjAwMDBaME0xCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxJzAlBgNVBAMTHkRpZ2lDZXJ0IFNIQTIg
|
||||
U2VjdXJlIFNlcnZlciBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
|
||||
ANyuWJBNwcQwFZA1W248ghX1LFy949v/cUP6ZCWA1O4Yok3wZtAKc24RmDYXZK83
|
||||
nf36QYSvx6+M/hpzTc8zl5CilodTgyu5pnVILR1WN3vaMTIa16yrBvSqXUu3R0bd
|
||||
KpPDkC55gIDvEwRqFDu1m5K+wgdlTvza/P96rtxcflUxDOg5B6TXvi/TC2rSsd9f
|
||||
/ld0Uzs1gN2ujkSYs58O09rg1/RrKatEp0tYhG2SS4HD2nOLEpdIkARFdRrdNzGX
|
||||
kujNVA075ME/OV4uuPNcfhCOhkEAjUVmR7ChZc6gqikJTvOX6+guqw9ypzAO+sf0
|
||||
/RR3w6RbKFfCs/mC/bdFWJsCAwEAAaOCAVowggFWMBIGA1UdEwEB/wQIMAYBAf8C
|
||||
AQAwDgYDVR0PAQH/BAQDAgGGMDQGCCsGAQUFBwEBBCgwJjAkBggrBgEFBQcwAYYY
|
||||
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMHsGA1UdHwR0MHIwN6A1oDOGMWh0dHA6
|
||||
Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RDQS5jcmwwN6A1
|
||||
oDOGMWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydEdsb2JhbFJvb3RD
|
||||
QS5jcmwwPQYDVR0gBDYwNDAyBgRVHSAAMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8v
|
||||
d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwHQYDVR0OBBYEFA+AYRyCMWHVLyjnjUY4tCzh
|
||||
xtniMB8GA1UdIwQYMBaAFAPeUDVW0Uy7ZvCj4hsbw5eyPdFVMA0GCSqGSIb3DQEB
|
||||
CwUAA4IBAQAjPt9L0jFCpbZ+QlwaRMxp0Wi0XUvgBCFsS+JtzLHgl4+mUwnNqipl
|
||||
5TlPHoOlblyYoiQm5vuh7ZPHLgLGTUq/sELfeNqzqPlt/yGFUzZgTHbO7Djc1lGA
|
||||
8MXW5dRNJ2Srm8c+cftIl7gzbckTB+6WohsYFfZcTEDts8Ls/3HB40f/1LkAtDdC
|
||||
2iDJ6m6K7hQGrn2iWZiIqBtvLfTyyRRfJs8sjX7tN8Cp1Tm5gr8ZDOo0rwAhaPit
|
||||
c+LJMto4JQtV05od8GiG7S5BNO98pVAdvzr508EIDObtHopYJeS4d60tbvVS3bR0
|
||||
j6tJLp07kzQoH3jOlOrHvdPJbRzeXDLz
|
||||
-----END CERTIFICATE-----
|
||||
|
||||
-----BEGIN CERTIFICATE-----
|
||||
MIIDrzCCApegAwIBAgIQCDvgVpBCRrGhdWrJWZHHSjANBgkqhkiG9w0BAQUFADBh
|
||||
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
|
||||
d3cuZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBD
|
||||
QTAeFw0wNjExMTAwMDAwMDBaFw0zMTExMTAwMDAwMDBaMGExCzAJBgNVBAYTAlVT
|
||||
MRUwEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5j
|
||||
b20xIDAeBgNVBAMTF0RpZ2lDZXJ0IEdsb2JhbCBSb290IENBMIIBIjANBgkqhkiG
|
||||
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvhEXLeqKTTo1eqUKKPC3eQyaKl7hLOllsB
|
||||
CSDMAZOnTjC3U/dDxGkAV53ijSLdhwZAAIEJzs4bg7/fzTtxRuLWZscFs3YnFo97
|
||||
nh6Vfe63SKMI2tavegw5BmV/Sl0fvBf4q77uKNd0f3p4mVmFaG5cIzJLv07A6Fpt
|
||||
43C/dxC//AH2hdmoRBBYMql1GNXRor5H4idq9Joz+EkIYIvUX7Q6hL+hqkpMfT7P
|
||||
T19sdl6gSzeRntwi5m3OFBqOasv+zbMUZBfHWymeMr/y7vrTC0LUq7dBMtoM1O/4
|
||||
gdW7jVg/tRvoSSiicNoxBN33shbyTApOB6jtSj1etX+jkMOvJwIDAQABo2MwYTAO
|
||||
BgNVHQ8BAf8EBAMCAYYwDwYDVR0TAQH/BAUwAwEB/zAdBgNVHQ4EFgQUA95QNVbR
|
||||
TLtm8KPiGxvDl7I90VUwHwYDVR0jBBgwFoAUA95QNVbRTLtm8KPiGxvDl7I90VUw
|
||||
DQYJKoZIhvcNAQEFBQADggEBAMucN6pIExIK+t1EnE9SsPTfrgT1eXkIoyQY/Esr
|
||||
hMAtudXH/vTBH1jLuG2cenTnmCmrEbXjcKChzUyImZOMkXDiqw8cvpOp/2PV5Adg
|
||||
06O/nVsJ8dWO41P0jmP6P6fbtGbfYmbW0W5BjfIttep3Sp+dWOIrWcBAI+0tKIJF
|
||||
PnlUkiaY4IBIqDfv8NZ5YBberOgOzW6sRBc4L0na4UU+Krk2U886UAb3LujEV0ls
|
||||
YSEY1QSteDwsOoBrp+uvFRTp2InBuThs4pFsiv9kuXclVzDAGySj4dzp30d8tbQk
|
||||
CAUw7C29C79Fv1C5qfPrmAESrciIxpg0X40KPMbp1ZWVbd4=
|
||||
-----END CERTIFICATE-----
|
||||
</ca>
|
||||
|
||||
|
Reference in New Issue
Block a user