Merge pull request #102 from wryspy/master

Replaced OpenVPN profiles with current versions from PIA
2016-07-18 23:12:26 +02:00
parent 4d395aedd2 5c62210c34
commit 8f284463ac
40 changed files with 258 additions and 227 deletions
--- a/Melbourne.ovpn
+++ b/Melbourne.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote aus-melbourne.privateinternetaccess.com 1194
+remote aus-melbourne.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/AU
+++ b/openvpn/pia/AU
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote aus.privateinternetaccess.com 1194
+remote aus.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Brazil.ovpn
+++ b/openvpn/pia/Brazil.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote brazil.privateinternetaccess.com 1194
+remote brazil.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/CA
+++ b/openvpn/pia/CA
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote ca.privateinternetaccess.com 1194
+remote ca.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/CA
+++ b/openvpn/pia/CA
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote ca-toronto.privateinternetaccess.com 1194
+remote ca-toronto.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Denmark.ovpn
+++ b/openvpn/pia/Denmark.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote denmark.privateinternetaccess.com 1194
+remote denmark.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Finland.ovpn
+++ b/openvpn/pia/Finland.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote fi.privateinternetaccess.com 1194
+remote fi.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/France.ovpn
+++ b/openvpn/pia/France.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote france.privateinternetaccess.com 1194
+remote france.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Germany.ovpn
+++ b/openvpn/pia/Germany.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote germany.privateinternetaccess.com 1194
+remote germany.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Hong
+++ b/openvpn/pia/Hong
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote hk.privateinternetaccess.com 1194
+remote hk.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/India.ovpn
+++ b/openvpn/pia/India.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote in.privateinternetaccess.com 1194
+remote in.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Ireland.ovpn
+++ b/openvpn/pia/Ireland.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote ireland.privateinternetaccess.com 1194
+remote ireland.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Israel.ovpn
+++ b/openvpn/pia/Israel.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote israel.privateinternetaccess.com 1194
+remote israel.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Italy.ovpn
+++ b/openvpn/pia/Italy.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote italy.privateinternetaccess.com 1194
+remote italy.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Japan.ovpn
+++ b/openvpn/pia/Japan.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote japan.privateinternetaccess.com 1194
+remote japan.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Mexico.ovpn
+++ b/openvpn/pia/Mexico.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote mexico.privateinternetaccess.com 1194
+remote mexico.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Netherlands.ovpn
+++ b/openvpn/pia/Netherlands.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote nl.privateinternetaccess.com 1194
+remote nl.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/New
+++ b/openvpn/pia/New
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote nz.privateinternetaccess.com 1194
+remote nz.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Norway.ovpn
+++ b/openvpn/pia/Norway.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote no.privateinternetaccess.com 1194
+remote no.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Romania.ovpn
+++ b/openvpn/pia/Romania.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote ro.privateinternetaccess.com 1194
+remote ro.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Russia.ovpn
+++ b/openvpn/pia/Russia.ovpn
@@ -1,18 +0,0 @@
-client
-dev tun
-proto udp
-remote russia.privateinternetaccess.com 1194
-resolv-retry infinite
-nobind
-persist-key
-persist-tun
-ca /etc/openvpn/pia/ca.crt
-tls-client
-remote-cert-tls server
-auth-user-pass /config/openvpn-credentials.txt
-comp-lzo
-verb 1
-reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
--- a/openvpn/pia/Singapore.ovpn
+++ b/openvpn/pia/Singapore.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote sg.privateinternetaccess.com 1194
+remote sg.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Sweden.ovpn
+++ b/openvpn/pia/Sweden.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote sweden.privateinternetaccess.com 1194
+remote sweden.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Switzerland.ovpn
+++ b/openvpn/pia/Switzerland.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote swiss.privateinternetaccess.com 1194
+remote swiss.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/Turkey.ovpn
+++ b/openvpn/pia/Turkey.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote turkey.privateinternetaccess.com 1194
+remote turkey.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/UK
+++ b/openvpn/pia/UK
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote uk-london.privateinternetaccess.com 1194
+remote uk-london.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/Southampton.ovpn
+++ b/Southampton.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote uk-southampton.privateinternetaccess.com 1194
+remote uk-southampton.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/California.ovpn
+++ b/California.ovpn
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-california.privateinternetaccess.com 1194
+remote us-california.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-east.privateinternetaccess.com 1194
+remote us-east.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-florida.privateinternetaccess.com 1194
+remote us-florida.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-midwest.privateinternetaccess.com 1194
+remote us-midwest.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-newyorkcity.privateinternetaccess.com 1194
+remote us-newyorkcity.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-seattle.privateinternetaccess.com 1194
+remote us-seattle.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-siliconvalley.privateinternetaccess.com 1194
+remote us-siliconvalley.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-texas.privateinternetaccess.com 1194
+remote us-texas.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/US
+++ b/openvpn/pia/US
@@ -1,18 +1,19 @@
 client
 dev tun
 proto udp
-remote us-west.privateinternetaccess.com 1194
+remote us-west.privateinternetaccess.com 1198
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-ca /etc/openvpn/pia/ca.crt
+cipher aes-128-cbc
+auth sha1
 tls-client
 remote-cert-tls server
 auth-user-pass /config/openvpn-credentials.txt
 comp-lzo
 verb 1
 reneg-sec 0
-crl-verify /etc/openvpn/pia/crl.pem
-
-
+crl-verify /etc/openvpn/pia/crl.rsa.2048.pem
+ca /etc/openvpn/pia/ca.rsa.2048.crt
+disable-occ
--- a/openvpn/pia/ca.crt
+++ b/openvpn/pia/ca.crt
@@ -1,23 +0,0 @@
-----BEGIN CERTIFICATE-----
-MIID2jCCA0OgAwIBAgIJAOtqMkR2JSXrMA0GCSqGSIb3DQEBBQUAMIGlMQswCQYD
-VQQGEwJVUzELMAkGA1UECBMCT0gxETAPBgNVBAcTCENvbHVtYnVzMSAwHgYDVQQK
-ExdQcml2YXRlIEludGVybmV0IEFjY2VzczEjMCEGA1UEAxMaUHJpdmF0ZSBJbnRl
-cm5ldCBBY2Nlc3MgQ0ExLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRlaW50
-ZXJuZXRhY2Nlc3MuY29tMB4XDTEwMDgyMTE4MjU1NFoXDTIwMDgxODE4MjU1NFow
-gaUxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJPSDERMA8GA1UEBxMIQ29sdW1idXMx
-IDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSMwIQYDVQQDExpQcml2
-YXRlIEludGVybmV0IEFjY2VzcyBDQTEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHBy
-aXZhdGVpbnRlcm5ldGFjY2Vzcy5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ
-AoGBAOlVlkHcxfN5HAswpryG7AN9CvcvVzcXvSEo91qAl/IE8H0knKZkIAhe/z3m
-hz0t91dBHh5yfqwrXlGiyilplVB9tfZohvcikGF3G6FFC9j40GKP0/d22JfR2vJt
-4/5JKRBlQc9wllswHZGmPVidQbU0YgoZl00bAySvkX/u1005AgMBAAGjggEOMIIB
-CjAdBgNVHQ4EFgQUl8qwY2t+GN0pa/wfq+YODsxgVQkwgdoGA1UdIwSB0jCBz4AU
-l8qwY2t+GN0pa/wfq+YODsxgVQmhgaukgagwgaUxCzAJBgNVBAYTAlVTMQswCQYD
-VQQIEwJPSDERMA8GA1UEBxMIQ29sdW1idXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50
-ZXJuZXQgQWNjZXNzMSMwIQYDVQQDExpQcml2YXRlIEludGVybmV0IEFjY2VzcyBD
-QTEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j
-b22CCQDrajJEdiUl6zAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBAByH
-atXgZzjFO6qctQWwV31P4qLelZzYndoZ7olY8ANPxl7jlP3YmbE1RzSnWtID9Gge
-fsKHi1jAS9tNP2E+DCZiWcM/5Y7/XKS/6KvrPQT90nM5klK9LfNvS+kFabMmMBe2
-llQlzAzFiIfabACTQn84QLeLOActKhK8hFJy2Gy6
-----END CERTIFICATE-----
--- a/openvpn/pia/ca.rsa.2048.crt
+++ b/openvpn/pia/ca.rsa.2048.crt
@@ -0,0 +1,33 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
--- a/openvpn/pia/crl.pem
+++ b/openvpn/pia/crl.pem
@@ -1,11 +0,0 @@
-----BEGIN X509 CRL-----
-MIIBgTCB6zANBgkqhkiG9w0BAQ0FADCBpTELMAkGA1UEBhMCVVMxCzAJBgNVBAgT
-Ak9IMREwDwYDVQQHEwhDb2x1bWJ1czEgMB4GA1UEChMXUHJpdmF0ZSBJbnRlcm5l
-dCBBY2Nlc3MxIzAhBgNVBAMTGlByaXZhdGUgSW50ZXJuZXQgQWNjZXNzIENBMS8w
-LQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbRcN
-MTQwNTA3MTgwOTE5WhcNMjQwNTA3MTgwOTE5WjAUMBICAQEXDTE0MDQyODIyMDMy
-NVowDQYJKoZIhvcNAQENBQADgYEA4EA2wjio+BxYFui1mBj5gmypxUQyA7xQJ3Vo
-cwWSllQKHpfmQ7fwyTL22uc21W9hM4geD1FwoXDUEraQjfyBJOxJwc6GOhTN2wHv
-3vplKjdbXmxxAfjduBvlIB0a6qSz1L6hwZJrZUGimlWS9NQrmYaKLbtG07n2UyA+
-mqz5bEc=
-----END X509 CRL-----
--- a/openvpn/pia/crl.rsa.2048.pem
+++ b/openvpn/pia/crl.rsa.2048.pem
@@ -0,0 +1,15 @@
+-----BEGIN X509 CRL-----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+-----END X509 CRL-----