client

dev tun

tun-mtu 9000
mssfix 0
fragment 0

proto udp

remote xx.xx.xx.xx 1194
resolv-retry infinite

nobind

user nobody
group nobody

mute-replay-warnings

ca keys/ca.crt
cert keys/my.crt  # broken due to bug in openssl or easy-rsa? 
key keys/my.key # so let's provide key directly

remote-cert-tls server
tls-auth keys/ta.key 1
cipher AES-256-CBC

comp-lzo
verb 1

auth-nocache