X-Git-Url: http://git.squeep.com/?a=blobdiff_plain;f=roles%2Fmsca-openvpn%2Ftemplates%2Fvpc-client.conf.j2;h=45df32136e02d50dfb4cff696fec53a91e765d34;hb=588872ef49cb75a5ffa775e738ae3c61f9d7bad0;hp=e881e969e99f007c97aba5810f76423254dab349;hpb=112e5102854af34c8efb88f2bd5a4f326752e378;p=awsible

diff --git a/roles/msca-openvpn/templates/vpc-client.conf.j2 b/roles/msca-openvpn/templates/vpc-client.conf.j2
index e881e96..45df321 100644
--- a/roles/msca-openvpn/templates/vpc-client.conf.j2
+++ b/roles/msca-openvpn/templates/vpc-client.conf.j2
@@ -18,3 +18,9 @@ daemon
 ca /etc/openvpn/keys/ca.{{ ca_name|lower }}.crt
 cert /etc/openvpn/keys/{{ vpc_region }}-client.{{ ca_name|lower }}.crt
 key /etc/openvpn/keys/{{ vpc_region }}-client.{{ ca_name|lower }}.key
+tls-server
+tls-version-min 1.2
+key-direction 0
+<tls-auth>
+{{ ta_secret }}
+</tls-auth>