client dev tun proto tcp remote ro.privateinternetaccess.com 502 resolv-retry infinite nobind persist-key persist-tun cipher aes-128-cbc auth sha1 tls-client remote-cert-tls server auth-user-pass /config/openvpn-credentials.txt comp-lzo verb 1 reneg-sec 0 crl-verify /etc/openvpn/pia/crl.rsa.2048.pem ca /etc/openvpn/pia/ca.rsa.2048.crt disable-occ