$ openvpn --config /home/m3/openvpn/vpn-maschine-client.conf
Thu Feb 23 09:04:35 2012 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Feb 23 09:04:35 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Feb 23 09:04:35 2012 Cannot load certificate file vpn-maschine-client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib

~$ openvpn /home/m3/openvpn/vpn-maschine-client.conf
Thu Feb 23 09:05:52 2012 WARNING: Make sure you understand the semantics of --tls-remote before using it (see the man page).
Thu Feb 23 09:05:52 2012 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Thu Feb 23 09:05:52 2012 Cannot load certificate file vpn-maschine-client.crt: error:02001002:system library:fopen:No such file or directory: error:20074002:BIO routines:FILE_CTRL:system lib: error:140AD002:SSL routines:SSL_CTX_use_certificate_file:system lib



XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX


client
float
dev tap

#MTU
tun-mtu 1492
#fragment 1300
mssfix

#tcp oder udp
proto udp

#Server IP
remote XX.XX.XX.XX 11XX

#force authentication
#WICHTIG: hier den COMMON Name vom Server Zertifikat nehmen!
tls-remote vpn-maschine

dh	vpn-maschine-dh4096.pem
ca	vpn-maschine-CA.crt
cert	vpn-maschine-client.crt
key	vpn-maschine-client.key

auth SHA1
cipher AES-256-CBC
nobind
comp-lzo
persist-key
persist-tun
verb 0

# Nach dem Verbindungsaufbau wird eine Route zum lokalen Netz vom Server aus aufgebaut
# AUSKOMMENTIERT
# Beispiel: Subnetz 192.168.2.0/24
#route 192.168.2.0 255.255.255.0

# Default route ueber VPN (wenn du dein INTERNET komplett ueber openvpn routen willst)
# AUSKOMMENTIERT
route remote_host 255.255.255.255 net_gateway
route 0.0.0.0 0.0.0.0 vpn_gateway

#Sets new rights after the connection
user nobody
group nogroup 

XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX