Could the configuration file format be extended to allow inclusion of relevant certs and keys in-line? e.g. instead of "ca ca.crt" and then having a separate file, you have something like:

dev tun
proto udp
remote server 1194
ca-inline
-----BEGIN CERTIFICATE-----
[snip]
-----END CERTIFICATE-----
key-inline
-----BEGIN RSA PRIVATE KEY-----
[snip]
-----END RSA PRIVATE KEY-----

This would then allow you to have a single file which is easier to move about. Also, this means that you have less problems using a file on both Unix and Windows as you don't have issues locating files.

I can see that this breaks the parity between configuration options and their command line equivalents, but I think it would be very useful.

--
Stephen

Reply via email to