client
dev tap
proto udp

remote vpn.fel.cvut.cz
port 1196

resolv-retry infinite
nobind

route-gateway dhcp
redirect-gateway def1

tls-client
verify-x509-name "vpn.fel.cvut.cz" name
remote-cert-eku "TLS Web Server Authentication"

persist-key
persist-tun

auth-user-pass

auth SHA1
cipher AES-256-CBC
keysize 256

key-direction 1

reneg-sec 36000

pull

push-peer-info

keepalive 10 120

verb 4

<tls-auth>
-----BEGIN OpenVPN Static key V1-----
...certifikat...
-----END OpenVPN Static key V1-----
</tls-auth>

<ca>
-----BEGIN CERTIFICATE-----
...certifikat...
-----END CERTIFICATE-----
</ca>