# Config for OpenVPN 2.

x
# Enables connection to GUI
management
/data/data/free.fast.psiphon.unblock.proxy.vpn_master.thunder_vpn/cache/mgmtsocket
unix
management-client
management-query-passwords
management-hold

setenv IV_GUI_VER "free.fast.psiphon.unblock.proxy.vpn_master.thunder_vpn 2.6.0"

setenv IV_PLAT_VER "19 4.4.2 armeabi-v7a Huawei BalongV8R1SFT CHC-U03"
machine-readable-output
allow-recursive-routing
ifconfig-nowarn
client
verb 4
connect-retry 2 300
resolv-retry 60
dev tun
remote 116.202.107.131 64135 udp
<ca>
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
</ca>
<key>
-----BEGIN PRIVATE KEY-----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q+hb6UM+3XVX7SwvrFYlPK9nBLTvkZaQdCVUcUCa55mSUQXURH8gUDbXtXzfWfkQ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-----END PRIVATE KEY-----
</key>
<cert>
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c8:6e:c1:c6:cf:f6:3e:e1:5b:e5:4d:61:3b:99:2d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ChangeMe
Validity
Not Before: Jun 21 10:10:54 2019 GMT
Not After : Jun 18 10:10:54 2029 GMT
Subject: CN=client
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:bc:89:67:32:60:e2:46:0e:99:27:75:3f:85:a8:
fc:89:32:3a:a5:cd:39:44:ef:88:d5:47:5b:24:79:
99:2d:67:e8:f4:82:60:7f:0e:81:4a:17:5e:e4:bb:
5c:77:4a:72:dd:86:39:57:d5:6c:d9:76:c0:77:06:
d1:fe:59:7b:9c:c3:3a:57:60:58:21:62:b0:3f:c1:
a9:45:dc:b1:6a:9a:5a:7b:a0:99:1e:18:5b:0b:ab:
67:d5:ac:32:ac:83:12:86:bf:bf:d8:ea:de:7e:a8:
22:81:e9:1f:72:ee:04:4a:c5:9b:b5:26:50:d4:00:
05:a5:6b:4b:e8:72:e6:59:99:23:56:ad:e0:fe:6b:
1f:d6:6c:97:60:25:88:ce:50:20:09:b8:3e:e3:22:
6e:ad:82:1a:b8:9a:68:0f:2e:ed:61:73:b2:24:57:
10:26:21:dc:89:b5:ac:14:39:25:0e:51:9e:c9:4e:
1e:ae:e7:f7:9a:db:5b:7a:a5:33:8d:16:62:d7:b2:
66:7b:56:e6:9a:b1:55:78:8f:a5:83:5b:bc:df:12:
c0:18:3f:97:07:ef:ac:06:26:a3:0e:f6:9e:b8:7e:
03:aa:9a:79:94:21:41:d5:ec:7b:36:ac:ac:e1:31:
d6:b2:44:02:40:d5:65:05:4d:d3:f0:45:e9:e5:05:
9a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Key Identifier:
FE:8E:8D:59:78:82:DE:41:F7:11:7D:B6:46:BB:A2:40:38:CB:4B:B9
X509v3 Authority Key Identifier:
keyid:A6:5E:EE:5B:61:E1:2B:B2:65:04:8B:48:EE:DA:08:9B:1D:DC:82:F8
DirName:/CN=ChangeMe
serial:EF:D9:BC:93:63:35:4E:20

X509v3 Extended Key Usage:

TLS Web Client Authentication
 X509v3 Key Usage:
Digital Signature
Signature Algorithm: sha256WithRSAEncryption
5f:9f:e6:0e:ee:90:63:36:35:48:71:a6:1b:aa:21:59:13:30:
53:9c:f9:10:bf:03:d4:71:4f:60:ab:37:a1:55:e5:71:93:8e:
45:57:15:7c:c7:93:93:81:59:62:84:08:c5:0f:f2:6e:6b:eb:
a3:ec:e6:86:d0:de:ad:cc:17:65:05:f8:3e:66:85:6c:0d:b3:
5e:58:22:79:15:1b:0d:21:19:6d:83:21:2e:96:8c:75:3b:1f:
7a:9e:24:6b:ec:ef:22:6e:c3:dc:8d:2a:8b:77:7f:5e:eb:25:
69:1c:92:c6:ff:f6:d0:4b:c8:71:d9:f3:00:c7:c4:e0:cf:13:
bd:bd:74:a5:19:22:fc:92:24:aa:9d:43:b9:48:a7:99:53:d5:
e6:75:5b:08:fd:4a:69:4c:a3:77:c7:d9:d7:57:43:7c:d3:3a:
7b:5d:de:a7:96:8f:48:74:e9:10:0a:54:cb:d2:ff:02:cd:08:
f7:cb:1a:e0:c6:c5:77:46:24:59:fc:d8:8f:28:94:d1:38:41:
1f:b7:d6:2a:77:5c:6e:cc:75:eb:b1:e7:48:50:12:e3:6b:4d:
0c:82:7e:38:6f:93:d3:95:64:2a:82:d2:8e:07:cb:a5:94:e9:
b6:c1:2e:8c:8d:ff:cd:13:5d:0a:72:b0:cb:bf:0a:0f:f2:fa:
23:84:dc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
6d8051efc598330af1b17d5e88932f01
7a8da1beffeca1f0f73fbac4ade6c661
d4872e81b6642e7ac249d53c9af26beb
a6b8be2377485252d81fb6a55e6d2169
13f68994d02a4fdefd5cc6e867604943
474330e0b3ca9754561eb632d9e0e316
1df2ef6651d3e002e5d4dd4ab8ad9129
7ef329f480feed87d8530c669480a3d9
fc00ed505fe37c1114bad3e6c5f38d73
c47f96ea216ccb263e5cd1851ae5f805
60846053a55e7a7ceb09d679452b032f
ab25ac49814ee1c4fa8c6afcee4dd173
2f980b6c5bda7af57e81a5ef979b82b0
8cb000e2a727ceeb296bfedb3b929b86
c579a9541d0867002bbac34b638832a7
e684c805b059381ddf6c6600b8b15caf
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1
nobind
remote-cert-tls server
cipher AES-256-CBC
auth SHA512
persist-tun
# persist-tun also enables pre resolving to avoid DNS resolve problem
preresolve
# Use system proxy setting
management-query-proxy
# Custom configuration options
# You are on your on own here :)
# These options found in the config file do not map to config settings:
rcvbuf 0
sndbuf 0
setenv opt block-outside-dns
resolv-retry infinite