# Perform a TLS loopback test -- client side.
#
# This test performs a TLS negotiation once every 10 seconds,
# and will terminate after 2 minutes.
#
# From the root directory of the OpenVPN distribution,
# after openvpn has been built, run:
#
#  ./openvpn --config sample-config-files/loopback-client  (In one window) 
#  ./openvpn --config sample-config-files/loopback-server  (Simultaneously in another window) 
#
# this config file has the crypto material (cert, key, ..) "inlined",
# while the "server" config has it as external reference - test both paths

rport 16000
lport 16001
remote localhost
local localhost
dev null
verb 3
reneg-sec 10
tls-client
remote-cert-tls server
#ca sample-keys/ca.crt
<ca>
-----BEGIN CERTIFICATE-----
MIIGPjCCBCagAwIBAgIUKrl/uqsfnVfXtPCmSHkXsorO2BkwDQYJKoZIhvcNAQEL
BQAwZjELMAkGA1UEBhMCS0cxCzAJBgNVBAgMAk5BMRAwDgYDVQQHDAdCSVNIS0VL
MRUwEwYDVQQKDAxPcGVuVlBOLVRFU1QxITAfBgkqhkiG9w0BCQEWEm1lQG15aG9z
dC5teWRvbWFpbjAeFw0yNTEyMzAxMTU4MDhaFw0zNTEyMjgxMTU4MDhaMGYxCzAJ
BgNVBAYTAktHMQswCQYDVQQIDAJOQTEQMA4GA1UEBwwHQklTSEtFSzEVMBMGA1UE
CgwMT3BlblZQTi1URVNUMSEwHwYJKoZIhvcNAQkBFhJtZUBteWhvc3QubXlkb21h
aW4wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQCSpJ0ZRI588po18yVq
LMn+pleHhVJ8RySdG4hBPdlkZmCZC45tDzeuCMNUJ3wDJrP7o2wSaF4EJp/27C/g
mK6VdFavey/iFWTaCcQCB7C4vmiLtdptGH0PHgorogy9I7H5sQEfh/WHTdhvKLin
5vcr+fYy1V5G4aEOL0WWH8PJHqJwWpjKMV4fCYKoLG8ra6bCgT8IyDgZU6Qwb8AK
CPUupNm54Z8BZNMjEmL4leYYDt/VWsVfdYWGkeg/Fk5nxLkq2jpH08yNUhT6+6eh
/LpYW0QLXsr/Ntqrvt9ScEeRSODrVPifHZWIQSrHaxxX0pLcSUVjDl/yt45S2LhI
hzuPDIopqkwfyWDCPpZwDa2j+ic4iKf3Liqb4F/tDqQF5PzBowpTx9oCpYCXrbgc
LrV389qJeVSLJRLBMZC5juySAJkCZLBn0q9gYABXeoSWLW45PKJs4nlcCnIHCsRB
EYs835iidkNfZoWPaP2CUkvY6Z2zMsjIaeQZcVKq/EkRcv3rfRHzrWIM0SmUGc5Q
9N2g0HJvHug8sPnW4Nm3ynaGELOG3HHStW5L8ISrEZTFqocGgnP1AWOp1Z16Oc3F
Fu3R7P94ByMuPDMh4QXkJqz15jEkoYtg2sKfjpmUW3vRRv1ZsXnQEwb6x7qV6dBU
T2HQ8A3HCKoQun9zGPLdmDU03QIDAQABo4HjMIHgMB0GA1UdDgQWBBQCylQEfL5o
zax/rlPwudjNsRx1rzCBowYDVR0jBIGbMIGYgBQCylQEfL5ozax/rlPwudjNsRx1
r6FqpGgwZjELMAkGA1UEBhMCS0cxCzAJBgNVBAgMAk5BMRAwDgYDVQQHDAdCSVNI
S0VLMRUwEwYDVQQKDAxPcGVuVlBOLVRFU1QxITAfBgkqhkiG9w0BCQEWEm1lQG15
aG9zdC5teWRvbWFpboIUKrl/uqsfnVfXtPCmSHkXsorO2BkwDAYDVR0TBAUwAwEB
/zALBgNVHQ8EBAMCAQYwDQYJKoZIhvcNAQELBQADggIBACHvhtpkA41JCmwbHURw
gCyO+0UNi6Enrb3BsJK4yhIW2WJjVYzUU1XPnzJtSigIop7AZ5cT+XCwgFFSx/A0
BhdXfRRqAA3xi4NXiV/+4nizO41yTocWitDo8St3KoSZnTOKpy86Ss6ba2TW7ykN
x8zA1Gx8hiZ5aBtVZNKffUyHOeLQ/HIjf49CzcXxbWENWHFCOa75W36GjMzwndhb
EKAMo2TVJkcH8pKv5Q4EGu4WdWKfbd3QscoZwJsW4zl+wPUrxgYlEsoBZlZr907h
Sm4yOSdZ7EknL8yZxHh5GZ6H4gohV7ZSLDct2fFQxBW1AMyZo+idf7BVjAUFJt34
aeFi67wL/DGVQOU+yPoHh+kQROjhTWLL79e8jwAgcPqxywwkicNhj+SVh8xipgN9
XI1eF7TpkxVK6ZiC3nMlbB5+r1WGwqLHJsulHPpFGok2qQLIaP8IhG44dSgkGcZi
Lyab1daOEfpXWzQa1wSsQzZyfGlLM9NEeej65ZM8ao+kjoFsy4s6TZe87UdIstgZ
IRvI37m3OdC+DUuXcJLWKdpNzDwlWfmlrQJCabheZtQVyOlkocvUS/hPBS01s7Ma
bHitGeV1VJA6gDZ7Q83hSSaumkgCQg75rT4f675qU1DZDeT1+v2kDRtN5C8nzxJ3
46knEwIB3qh9KbZ7PPwoxcmL
-----END CERTIFICATE-----
</ca>
#key sample-keys/client.key
<key>
-----BEGIN PRIVATE KEY-----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-----END PRIVATE KEY-----
</key>
#cert sample-keys/client.crt
<cert>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</cert>
#tls-auth sample-keys/ta.key 1
key-direction 1
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
21d94830510107f8753d3b6f3145e01d
ed37075115afcb0538ecdd8503ee9663
7218c9ed38d908d594231d7d143c73da
5055310f89d336da99c8b3dcb18909c7
9dd44f540670ebc0f120beb7211e9683
9cb542572c48bfa7ffaa9a22cb8304b7
869b92f4442918e598745bb78ac8877f
02b00a7cdef3f2446c130d39a7c45126
9ef399fd6029cdfc80a7c604041312ab
0a969bc906bdee6e6d707afdcbe8c7fb
97beb66049c3d328340775025433ceba
1e38008a826cf92443d903106199373b
dadd9c2c735cf481e580db4e81b99f12
e3f46b6159c687cd1b9e689f7712573c
0f02735a45573dfb5cd55cf464942389
2c7e91f439bdd7337a8ceebd302cfbfa
-----END OpenVPN Static key V1-----
</tls-auth>
cipher AES-256-GCM
ping 1
inactive 120 10000000
# Ensure testing does not wait for entropy (do not use in production)
min-platform-entropy 0
