From b6de5e4a40f922317c4dc8ee96194d7397d700fc Mon Sep 17 00:00:00 2001
From: lawtancool <26829131+lawtancool@users.noreply.github.com>
Date: Fri, 21 Feb 2020 21:15:32 -0800
Subject: [PATCH] change client config to use tls-crypt instead of tls-auth

---
 bin/ovpn_getclient | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bin/ovpn_getclient b/bin/ovpn_getclient
index 092aeea..c565cef 100755
--- a/bin/ovpn_getclient
+++ b/bin/ovpn_getclient
@@ -58,17 +58,18 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
 <ca>
 $(cat $EASYRSA_PKI/ca.crt)
 </ca>
-key-direction 1
-<tls-auth>
+#key-direction 1
+<tls-crypt>
 $(cat $EASYRSA_PKI/ta.key)
-</tls-auth>
+</tls-crypt>
 "
     elif [ "$mode" == "separated" ]; then
         echo "
 key ${cn}.key
 ca ca.crt
 cert ${cn}.crt
-tls-auth ta.key 1
+tls-crypt ta.key
+#tls-auth ta.key 1
 "
     fi