setenv IV_GUI_VER "de.blinkt.openvpn 0.6.44" 
#ifconfig-nowarn
client
verb 4
#connect-retry-max 5
#connect-retry 5
#resolv-retry 60
dev tun
remote vpn.karlov.mff.cuni.cz 1194 udp
auth-user-pass
<ca>
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIJAONsQ4S/AamKMA0GCSqGSIb3DQEBBQUAMIGtMQswCQYD
VQQGEwJDWjEOMAwGA1UECBMFUHJhaGExDjAMBgNVBAcTBVByYWhhMR0wGwYDVQQK
ExRVSyBNRkYsIFBTaUsgT3BlblZQTjENMAsGA1UECxMEUFNpSzESMBAGA1UEAxMJ
Y2FQU2lLdnBuMRIwEAYDVQQpEwljYVBTaUt2cG4xKDAmBgkqhkiG9w0BCQEWGW5l
dGFkbUBrYXJsb3YubWZmLmN1bmkuY3owHhcNMTUwMzIzMTQxMTQ5WhcNMzUwMzIz
MTQxMTQ5WjCBrTELMAkGA1UEBhMCQ1oxDjAMBgNVBAgTBVByYWhhMQ4wDAYDVQQH
EwVQcmFoYTEdMBsGA1UEChMUVUsgTUZGLCBQU2lLIE9wZW5WUE4xDTALBgNVBAsT
BFBTaUsxEjAQBgNVBAMTCWNhUFNpS3ZwbjESMBAGA1UEKRMJY2FQU2lLdnBuMSgw
JgYJKoZIhvcNAQkBFhluZXRhZG1Aa2FybG92Lm1mZi5jdW5pLmN6MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+0dhPOE+aZ2VYGzZ1TzTFXNdBNt4WC8Z
02Zl2jOK/gSfyK66dM3dlxMH0mxtyJIk7CCa3t1jHQNhgz4DzI1PAUuJimME2NAp
QvJezsg4teiuyrk1cRnKMfAlXm+4ncZzKCpZSH3+s6XYzOBUUvvl/RvNonidRELL
aHd/n1ScH4+5JNFZA1cWkaJjqMLfd9+GCuAluNMfu6a94FRtz7tTi06F0NKCzuqg
OXVG6Y4TUQ8GEyltG+TqZAf5dQMdv+HETmgeXX6y6O8A23ebzpd+KfVaq8W9ryJn
bl819rVs4iL8saqWFPV1lMDZ6PJkc6razvbO01vXtCkkqsR+uIoKswIDAQABo4IB
FjCCARIwHQYDVR0OBBYEFJr1v/qff7WlaD6aO9/JrKwmJsMVMIHiBgNVHSMEgdow
gdeAFJr1v/qff7WlaD6aO9/JrKwmJsMVoYGzpIGwMIGtMQswCQYDVQQGEwJDWjEO
MAwGA1UECBMFUHJhaGExDjAMBgNVBAcTBVByYWhhMR0wGwYDVQQKExRVSyBNRkYs
IFBTaUsgT3BlblZQTjENMAsGA1UECxMEUFNpSzESMBAGA1UEAxMJY2FQU2lLdnBu
MRIwEAYDVQQpEwljYVBTaUt2cG4xKDAmBgkqhkiG9w0BCQEWGW5ldGFkbUBrYXJs
b3YubWZmLmN1bmkuY3qCCQDjbEOEvwGpijAMBgNVHRMEBTADAQH/MA0GCSqGSIb3
DQEBBQUAA4IBAQB2cr7q05CyrtfxHYPUqJk2rpszd3/szjb5UUSReiTo0+WrH3uK
VPVLJIQyJepDiK8XFI96r68k7C3BdNDqGNBRlZN/Ved0IbTCFI9h+PQIZ0nE9NAN
c8cuObndBPvx76At1xnjTWWG8W3YzTQSg1LJpvSi7TU8sF9R7QIBDTTEneuIiit1
aWUrZsu2VHHCU1chkax9QD8g58glDnayNn9vIrcSqgiiIiy8T9BuCblZTTVAsMkJ
uHrd0Y++Bh6h9ys/j2StvJM8MXFLl+wzf0jpWZ8+t/7+FP8FI4LkGsgxVeSg0OHF
HdBZPsBPpFSu084ApX0yw4VhohBu9/tecaam
-----END CERTIFICATE-----

</ca>
mssfix 1300
verify-x509-name vpn.karlov.mff.cuni.cz name
remote-cert-tls server