From 5c62210c34fa5c4b88d92e2d69c9706b864f3ba4 Mon Sep 17 00:00:00 2001 From: wryspy Date: Sun, 17 Jul 2016 21:05:00 -0400 Subject: [PATCH] Replaced OpenVPN profiles with current versions from PIA Replaced OpenVPN profiles with current versions from PIA. Modified slightly to point to proper paths where necessary. Russia profile removed. See https://www.privateinternetaccess.com/forum/discussion/21779/we-are-removing-our-russian-presence --- openvpn/pia/AU Melbourne.ovpn | 11 +++++----- openvpn/pia/AU Sydney.ovpn | 11 +++++----- openvpn/pia/Brazil.ovpn | 11 +++++----- openvpn/pia/CA North York.ovpn | 11 +++++----- openvpn/pia/CA Toronto.ovpn | 11 +++++----- openvpn/pia/Denmark.ovpn | 11 +++++----- openvpn/pia/Finland.ovpn | 11 +++++----- openvpn/pia/France.ovpn | 11 +++++----- openvpn/pia/Germany.ovpn | 11 +++++----- openvpn/pia/Hong Kong.ovpn | 11 +++++----- openvpn/pia/India.ovpn | 11 +++++----- openvpn/pia/Ireland.ovpn | 11 +++++----- openvpn/pia/Israel.ovpn | 11 +++++----- openvpn/pia/Italy.ovpn | 11 +++++----- openvpn/pia/Japan.ovpn | 11 +++++----- openvpn/pia/Mexico.ovpn | 11 +++++----- openvpn/pia/Netherlands.ovpn | 11 +++++----- openvpn/pia/New Zealand.ovpn | 11 +++++----- openvpn/pia/Norway.ovpn | 11 +++++----- openvpn/pia/Romania.ovpn | 11 +++++----- openvpn/pia/Russia.ovpn | 18 ---------------- openvpn/pia/Singapore.ovpn | 11 +++++----- openvpn/pia/Sweden.ovpn | 11 +++++----- openvpn/pia/Switzerland.ovpn | 11 +++++----- openvpn/pia/Turkey.ovpn | 11 +++++----- openvpn/pia/UK London.ovpn | 11 +++++----- openvpn/pia/UK Southampton.ovpn | 11 +++++----- openvpn/pia/US California.ovpn | 11 +++++----- openvpn/pia/US East.ovpn | 11 +++++----- openvpn/pia/US Florida.ovpn | 11 +++++----- openvpn/pia/US Midwest.ovpn | 11 +++++----- openvpn/pia/US New York City.ovpn | 11 +++++----- openvpn/pia/US Seattle.ovpn | 11 +++++----- openvpn/pia/US Silicon Valley.ovpn | 11 +++++----- openvpn/pia/US Texas.ovpn | 11 +++++----- openvpn/pia/US West.ovpn | 11 +++++----- openvpn/pia/ca.crt | 23 --------------------- openvpn/pia/ca.rsa.2048.crt | 33 ++++++++++++++++++++++++++++++ openvpn/pia/crl.pem | 11 ---------- openvpn/pia/crl.rsa.2048.pem | 15 ++++++++++++++ 40 files changed, 258 insertions(+), 227 deletions(-) delete mode 100644 openvpn/pia/Russia.ovpn delete mode 100644 openvpn/pia/ca.crt create mode 100644 openvpn/pia/ca.rsa.2048.crt delete mode 100644 openvpn/pia/crl.pem create mode 100644 openvpn/pia/crl.rsa.2048.pem diff --git a/openvpn/pia/AU Melbourne.ovpn b/openvpn/pia/AU Melbourne.ovpn index 864e90ace..2a22a1576 100644 --- a/openvpn/pia/AU Melbourne.ovpn +++ b/openvpn/pia/AU Melbourne.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote aus-melbourne.privateinternetaccess.com 1194 +remote aus-melbourne.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/AU Sydney.ovpn b/openvpn/pia/AU Sydney.ovpn index 114aa9783..f2d309a8e 100644 --- a/openvpn/pia/AU Sydney.ovpn +++ b/openvpn/pia/AU Sydney.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote aus.privateinternetaccess.com 1194 +remote aus.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Brazil.ovpn b/openvpn/pia/Brazil.ovpn index e682e3a77..6ef4d13e1 100644 --- a/openvpn/pia/Brazil.ovpn +++ b/openvpn/pia/Brazil.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote brazil.privateinternetaccess.com 1194 +remote brazil.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/CA North York.ovpn b/openvpn/pia/CA North York.ovpn index fa03b42b1..eb335e554 100644 --- a/openvpn/pia/CA North York.ovpn +++ b/openvpn/pia/CA North York.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote ca.privateinternetaccess.com 1194 +remote ca.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/CA Toronto.ovpn b/openvpn/pia/CA Toronto.ovpn index 69c2d4359..3e5257e13 100644 --- a/openvpn/pia/CA Toronto.ovpn +++ b/openvpn/pia/CA Toronto.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote ca-toronto.privateinternetaccess.com 1194 +remote ca-toronto.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Denmark.ovpn b/openvpn/pia/Denmark.ovpn index dda51bb10..7fafd9859 100644 --- a/openvpn/pia/Denmark.ovpn +++ b/openvpn/pia/Denmark.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote denmark.privateinternetaccess.com 1194 +remote denmark.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Finland.ovpn b/openvpn/pia/Finland.ovpn index d7339c1d5..1931617b9 100644 --- a/openvpn/pia/Finland.ovpn +++ b/openvpn/pia/Finland.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote fi.privateinternetaccess.com 1194 +remote fi.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/France.ovpn b/openvpn/pia/France.ovpn index a6bfea7ff..8d6f31e5b 100644 --- a/openvpn/pia/France.ovpn +++ b/openvpn/pia/France.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote france.privateinternetaccess.com 1194 +remote france.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Germany.ovpn b/openvpn/pia/Germany.ovpn index d95140477..1ba9b9e7a 100644 --- a/openvpn/pia/Germany.ovpn +++ b/openvpn/pia/Germany.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote germany.privateinternetaccess.com 1194 +remote germany.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Hong Kong.ovpn b/openvpn/pia/Hong Kong.ovpn index 48e15ad4a..19c5c2e28 100644 --- a/openvpn/pia/Hong Kong.ovpn +++ b/openvpn/pia/Hong Kong.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote hk.privateinternetaccess.com 1194 +remote hk.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/India.ovpn b/openvpn/pia/India.ovpn index 4c558371e..f5e17bffd 100644 --- a/openvpn/pia/India.ovpn +++ b/openvpn/pia/India.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote in.privateinternetaccess.com 1194 +remote in.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Ireland.ovpn b/openvpn/pia/Ireland.ovpn index ead4494f9..57bb1cb3b 100644 --- a/openvpn/pia/Ireland.ovpn +++ b/openvpn/pia/Ireland.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote ireland.privateinternetaccess.com 1194 +remote ireland.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Israel.ovpn b/openvpn/pia/Israel.ovpn index bb6f6a01c..ce9a1b6e0 100644 --- a/openvpn/pia/Israel.ovpn +++ b/openvpn/pia/Israel.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote israel.privateinternetaccess.com 1194 +remote israel.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Italy.ovpn b/openvpn/pia/Italy.ovpn index d87644bd7..62bf3afbc 100644 --- a/openvpn/pia/Italy.ovpn +++ b/openvpn/pia/Italy.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote italy.privateinternetaccess.com 1194 +remote italy.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Japan.ovpn b/openvpn/pia/Japan.ovpn index ebfb0a4a5..53e3988e5 100644 --- a/openvpn/pia/Japan.ovpn +++ b/openvpn/pia/Japan.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote japan.privateinternetaccess.com 1194 +remote japan.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Mexico.ovpn b/openvpn/pia/Mexico.ovpn index 4fd43d818..4965ce3ca 100644 --- a/openvpn/pia/Mexico.ovpn +++ b/openvpn/pia/Mexico.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote mexico.privateinternetaccess.com 1194 +remote mexico.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Netherlands.ovpn b/openvpn/pia/Netherlands.ovpn index b3491d84f..d9e9f1037 100644 --- a/openvpn/pia/Netherlands.ovpn +++ b/openvpn/pia/Netherlands.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote nl.privateinternetaccess.com 1194 +remote nl.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/New Zealand.ovpn b/openvpn/pia/New Zealand.ovpn index ecddfb03f..c69079198 100644 --- a/openvpn/pia/New Zealand.ovpn +++ b/openvpn/pia/New Zealand.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote nz.privateinternetaccess.com 1194 +remote nz.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Norway.ovpn b/openvpn/pia/Norway.ovpn index 94f433df2..962689b1a 100644 --- a/openvpn/pia/Norway.ovpn +++ b/openvpn/pia/Norway.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote no.privateinternetaccess.com 1194 +remote no.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Romania.ovpn b/openvpn/pia/Romania.ovpn index 746ca1edc..c5fd06669 100644 --- a/openvpn/pia/Romania.ovpn +++ b/openvpn/pia/Romania.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote ro.privateinternetaccess.com 1194 +remote ro.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Russia.ovpn b/openvpn/pia/Russia.ovpn deleted file mode 100644 index 6be120ea3..000000000 --- a/openvpn/pia/Russia.ovpn +++ /dev/null @@ -1,18 +0,0 @@ -client -dev tun -proto udp -remote russia.privateinternetaccess.com 1194 -resolv-retry infinite -nobind -persist-key -persist-tun -ca /etc/openvpn/pia/ca.crt -tls-client -remote-cert-tls server -auth-user-pass /config/openvpn-credentials.txt -comp-lzo -verb 1 -reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - diff --git a/openvpn/pia/Singapore.ovpn b/openvpn/pia/Singapore.ovpn index 6f4a26329..18be75fcc 100644 --- a/openvpn/pia/Singapore.ovpn +++ b/openvpn/pia/Singapore.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote sg.privateinternetaccess.com 1194 +remote sg.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Sweden.ovpn b/openvpn/pia/Sweden.ovpn index a8036a093..9f4ca0bcc 100644 --- a/openvpn/pia/Sweden.ovpn +++ b/openvpn/pia/Sweden.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote sweden.privateinternetaccess.com 1194 +remote sweden.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Switzerland.ovpn b/openvpn/pia/Switzerland.ovpn index 9654e85bf..4c7bff6c6 100644 --- a/openvpn/pia/Switzerland.ovpn +++ b/openvpn/pia/Switzerland.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote swiss.privateinternetaccess.com 1194 +remote swiss.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/Turkey.ovpn b/openvpn/pia/Turkey.ovpn index a25e9acc2..e192e6062 100644 --- a/openvpn/pia/Turkey.ovpn +++ b/openvpn/pia/Turkey.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote turkey.privateinternetaccess.com 1194 +remote turkey.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/UK London.ovpn b/openvpn/pia/UK London.ovpn index 4fac3ffe1..a51f949b6 100644 --- a/openvpn/pia/UK London.ovpn +++ b/openvpn/pia/UK London.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote uk-london.privateinternetaccess.com 1194 +remote uk-london.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/UK Southampton.ovpn b/openvpn/pia/UK Southampton.ovpn index d867f95e1..5b00774a4 100644 --- a/openvpn/pia/UK Southampton.ovpn +++ b/openvpn/pia/UK Southampton.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote uk-southampton.privateinternetaccess.com 1194 +remote uk-southampton.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US California.ovpn b/openvpn/pia/US California.ovpn index 527c7b3e6..bfc4aaa73 100644 --- a/openvpn/pia/US California.ovpn +++ b/openvpn/pia/US California.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-california.privateinternetaccess.com 1194 +remote us-california.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US East.ovpn b/openvpn/pia/US East.ovpn index 385cacc47..11dfe60d2 100644 --- a/openvpn/pia/US East.ovpn +++ b/openvpn/pia/US East.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-east.privateinternetaccess.com 1194 +remote us-east.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US Florida.ovpn b/openvpn/pia/US Florida.ovpn index 16e137079..683164e89 100644 --- a/openvpn/pia/US Florida.ovpn +++ b/openvpn/pia/US Florida.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-florida.privateinternetaccess.com 1194 +remote us-florida.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US Midwest.ovpn b/openvpn/pia/US Midwest.ovpn index 2c124d197..c6dd1e6a3 100644 --- a/openvpn/pia/US Midwest.ovpn +++ b/openvpn/pia/US Midwest.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-midwest.privateinternetaccess.com 1194 +remote us-midwest.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US New York City.ovpn b/openvpn/pia/US New York City.ovpn index 127db52c1..811bb703a 100644 --- a/openvpn/pia/US New York City.ovpn +++ b/openvpn/pia/US New York City.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-newyorkcity.privateinternetaccess.com 1194 +remote us-newyorkcity.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US Seattle.ovpn b/openvpn/pia/US Seattle.ovpn index 9dca4941c..72a03794f 100644 --- a/openvpn/pia/US Seattle.ovpn +++ b/openvpn/pia/US Seattle.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-seattle.privateinternetaccess.com 1194 +remote us-seattle.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US Silicon Valley.ovpn b/openvpn/pia/US Silicon Valley.ovpn index c6f7e7710..f8af22177 100644 --- a/openvpn/pia/US Silicon Valley.ovpn +++ b/openvpn/pia/US Silicon Valley.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-siliconvalley.privateinternetaccess.com 1194 +remote us-siliconvalley.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US Texas.ovpn b/openvpn/pia/US Texas.ovpn index a0cbb2e1e..1f265ffd1 100644 --- a/openvpn/pia/US Texas.ovpn +++ b/openvpn/pia/US Texas.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-texas.privateinternetaccess.com 1194 +remote us-texas.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/US West.ovpn b/openvpn/pia/US West.ovpn index f9c6fa548..467d4e506 100644 --- a/openvpn/pia/US West.ovpn +++ b/openvpn/pia/US West.ovpn @@ -1,18 +1,19 @@ client dev tun proto udp -remote us-west.privateinternetaccess.com 1194 +remote us-west.privateinternetaccess.com 1198 resolv-retry infinite nobind persist-key persist-tun -ca /etc/openvpn/pia/ca.crt +cipher aes-128-cbc +auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 -crl-verify /etc/openvpn/pia/crl.pem - - +crl-verify /etc/openvpn/pia/crl.rsa.2048.pem +ca /etc/openvpn/pia/ca.rsa.2048.crt +disable-occ diff --git a/openvpn/pia/ca.crt b/openvpn/pia/ca.crt deleted file mode 100644 index 6cbfe8b66..000000000 --- a/openvpn/pia/ca.crt +++ /dev/null @@ -1,23 +0,0 @@ ------BEGIN CERTIFICATE----- -MIID2jCCA0OgAwIBAgIJAOtqMkR2JSXrMA0GCSqGSIb3DQEBBQUAMIGlMQswCQYD -VQQGEwJVUzELMAkGA1UECBMCT0gxETAPBgNVBAcTCENvbHVtYnVzMSAwHgYDVQQK -ExdQcml2YXRlIEludGVybmV0IEFjY2VzczEjMCEGA1UEAxMaUHJpdmF0ZSBJbnRl -cm5ldCBBY2Nlc3MgQ0ExLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRlaW50 -ZXJuZXRhY2Nlc3MuY29tMB4XDTEwMDgyMTE4MjU1NFoXDTIwMDgxODE4MjU1NFow -gaUxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJPSDERMA8GA1UEBxMIQ29sdW1idXMx -IDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSMwIQYDVQQDExpQcml2 -YXRlIEludGVybmV0IEFjY2VzcyBDQTEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHBy -aXZhdGVpbnRlcm5ldGFjY2Vzcy5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJ -AoGBAOlVlkHcxfN5HAswpryG7AN9CvcvVzcXvSEo91qAl/IE8H0knKZkIAhe/z3m -hz0t91dBHh5yfqwrXlGiyilplVB9tfZohvcikGF3G6FFC9j40GKP0/d22JfR2vJt -4/5JKRBlQc9wllswHZGmPVidQbU0YgoZl00bAySvkX/u1005AgMBAAGjggEOMIIB -CjAdBgNVHQ4EFgQUl8qwY2t+GN0pa/wfq+YODsxgVQkwgdoGA1UdIwSB0jCBz4AU -l8qwY2t+GN0pa/wfq+YODsxgVQmhgaukgagwgaUxCzAJBgNVBAYTAlVTMQswCQYD -VQQIEwJPSDERMA8GA1UEBxMIQ29sdW1idXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50 -ZXJuZXQgQWNjZXNzMSMwIQYDVQQDExpQcml2YXRlIEludGVybmV0IEFjY2VzcyBD -QTEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j -b22CCQDrajJEdiUl6zAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBAByH -atXgZzjFO6qctQWwV31P4qLelZzYndoZ7olY8ANPxl7jlP3YmbE1RzSnWtID9Gge -fsKHi1jAS9tNP2E+DCZiWcM/5Y7/XKS/6KvrPQT90nM5klK9LfNvS+kFabMmMBe2 -llQlzAzFiIfabACTQn84QLeLOActKhK8hFJy2Gy6 ------END CERTIFICATE----- diff --git a/openvpn/pia/ca.rsa.2048.crt b/openvpn/pia/ca.rsa.2048.crt new file mode 100644 index 000000000..6deea6063 --- /dev/null +++ b/openvpn/pia/ca.rsa.2048.crt @@ -0,0 +1,33 @@ +-----BEGIN CERTIFICATE----- +MIIFqzCCBJOgAwIBAgIJAKZ7D5Yv87qDMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD +VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV +BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu +dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx +IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB +FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzM1 +MThaFw0zNDA0MTIxNzM1MThaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex +EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg +QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE +AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50 +ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy +bmV0YWNjZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXD +L1L9tX6DGf36liA7UBTy5I869z0UVo3lImfOs/GSiFKPtInlesP65577nd7UNzzX +lH/P/CnFPdBWlLp5ze3HRBCc/Avgr5CdMRkEsySL5GHBZsx6w2cayQ2EcRhVTwWp +cdldeNO+pPr9rIgPrtXqT4SWViTQRBeGM8CDxAyTopTsobjSiYZCF9Ta1gunl0G/ +8Vfp+SXfYCC+ZzWvP+L1pFhPRqzQQ8k+wMZIovObK1s+nlwPaLyayzw9a8sUnvWB +/5rGPdIYnQWPgoNlLN9HpSmsAcw2z8DXI9pIxbr74cb3/HSfuYGOLkRqrOk6h4RC +OfuWoTrZup1uEOn+fw8CAwEAAaOCAVQwggFQMB0GA1UdDgQWBBQv63nQ/pJAt5tL +y8VJcbHe22ZOsjCCAR8GA1UdIwSCARYwggESgBQv63nQ/pJAt5tLy8VJcbHe22ZO +sqGB7qSB6zCB6DELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpM +b3NBbmdlbGVzMSAwHgYDVQQKExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4G +A1UECxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBAMTF1ByaXZhdGUg +SW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQpExdQcml2YXRlIEludGVybmV0IEFjY2Vz +czEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j +b22CCQCmew+WL/O6gzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4IBAQAn +a5PgrtxfwTumD4+3/SYvwoD66cB8IcK//h1mCzAduU8KgUXocLx7QgJWo9lnZ8xU +ryXvWab2usg4fqk7FPi00bED4f4qVQFVfGfPZIH9QQ7/48bPM9RyfzImZWUCenK3 +7pdw4Bvgoys2rHLHbGen7f28knT2j/cbMxd78tQc20TIObGjo8+ISTRclSTRBtyC +GohseKYpTS9himFERpUgNtefvYHbn70mIOzfOJFTVqfrptf9jXa9N8Mpy3ayfodz +1wiqdteqFXkTYoSDctgKMiZ6GdocK9nMroQipIQtpnwd4yBDWIyC6Bvlkrq5TQUt +YDQ8z9v+DMO6iwyIDRiU +-----END CERTIFICATE----- diff --git a/openvpn/pia/crl.pem b/openvpn/pia/crl.pem deleted file mode 100644 index 278adac36..000000000 --- a/openvpn/pia/crl.pem +++ /dev/null @@ -1,11 +0,0 @@ ------BEGIN X509 CRL----- -MIIBgTCB6zANBgkqhkiG9w0BAQ0FADCBpTELMAkGA1UEBhMCVVMxCzAJBgNVBAgT -Ak9IMREwDwYDVQQHEwhDb2x1bWJ1czEgMB4GA1UEChMXUHJpdmF0ZSBJbnRlcm5l -dCBBY2Nlc3MxIzAhBgNVBAMTGlByaXZhdGUgSW50ZXJuZXQgQWNjZXNzIENBMS8w -LQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbRcN -MTQwNTA3MTgwOTE5WhcNMjQwNTA3MTgwOTE5WjAUMBICAQEXDTE0MDQyODIyMDMy -NVowDQYJKoZIhvcNAQENBQADgYEA4EA2wjio+BxYFui1mBj5gmypxUQyA7xQJ3Vo -cwWSllQKHpfmQ7fwyTL22uc21W9hM4geD1FwoXDUEraQjfyBJOxJwc6GOhTN2wHv -3vplKjdbXmxxAfjduBvlIB0a6qSz1L6hwZJrZUGimlWS9NQrmYaKLbtG07n2UyA+ -mqz5bEc= ------END X509 CRL----- diff --git a/openvpn/pia/crl.rsa.2048.pem b/openvpn/pia/crl.rsa.2048.pem new file mode 100644 index 000000000..a58ef56cf --- /dev/null +++ b/openvpn/pia/crl.rsa.2048.pem @@ -0,0 +1,15 @@ +-----BEGIN X509 CRL----- +MIICWDCCAUAwDQYJKoZIhvcNAQENBQAwgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI +EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl +cm5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw +HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0 +ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl +aW50ZXJuZXRhY2Nlc3MuY29tFw0xNjA3MDgxOTAwNDZaFw0zNjA3MDMxOTAwNDZa +MCYwEQIBARcMMTYwNzA4MTkwMDQ2MBECAQYXDDE2MDcwODE5MDA0NjANBgkqhkiG +9w0BAQ0FAAOCAQEAQZo9X97ci8EcPYu/uK2HB152OZbeZCINmYyluLDOdcSvg6B5 +jI+ffKN3laDvczsG6CxmY3jNyc79XVpEYUnq4rT3FfveW1+Ralf+Vf38HdpwB8EW +B4hZlQ205+21CALLvZvR8HcPxC9KEnev1mU46wkTiov0EKc+EdRxkj5yMgv0V2Re +ze7AP+NQ9ykvDScH4eYCsmufNpIjBLhpLE2cuZZXBLcPhuRzVoU3l7A9lvzG9mjA +5YijHJGHNjlWFqyrn1CfYS6koa4TGEPngBoAziWRbDGdhEgJABHrpoaFYaL61zqy +MR6jC0K2ps9qyZAN74LEBedEfK7tBOzWMwr58A== +-----END X509 CRL-----