Could the configuration file format be extended to allow inclusion of
relevant certs and keys in-line? e.g. instead of "ca ca.crt" and then
having a separate file, you have something like:
dev tun
proto udp
remote server 1194
ca-inline
-----BEGIN CERTIFICATE-----
[snip]
-----END CERTIFICATE-----
key-inline
-----BEGIN RSA PRIVATE KEY-----
[snip]
-----END RSA PRIVATE KEY-----
This would then allow you to have a single file which is easier to move
about. Also, this means that you have less problems using a file on
both Unix and Windows as you don't have issues locating files.
I can see that this breaks the parity between configuration options and
their command line equivalents, but I think it would be very useful.
--
Stephen