Merge pull request haugene#676 from jfessard/master

Updated all Mullvad configs

openvpn/adjustConfigs.sh

@@ -13,14 +13,14 @@ normal=$(tput sgr0)
 # Just need to double check that the default.ovpn is still there and that the diff to origin looks reasonable.
 #
 
-display_usage() { 
+display_usage() {
 	echo "${bold}Hint: read the script before using it${normal}"
 	echo "If you just forgot: ./adjustConfigs.sh <provider-folder>"
 }
 
-# if no arguments supplied, display usage 
-if [  $# -lt 1 ] 
-then 
+# if no arguments supplied, display usage
+if [  $# -lt 1 ]
+then
 	display_usage
 	exit 1
 fi
@@ -45,6 +45,9 @@ for configFile in $provider/*.ovpn;
 		# Set user-pass file location
 		sed -i "s/auth-user-pass.*/auth-user-pass \/config\/openvpn-credentials.txt/g" "$configFile"
 
+    # Remove up/down resolv-conf script calls (Mullvad)
+    sed -i "/update-resolv-conf/d" "$configFile"
+
 	done
 
 echo "Updated all .ovpn files in folder $provider"

openvpn/mullvad/ca.crt

@@ -0,0 +1,70 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

openvpn/mullvad/mullvad_SK_tcp443.ovpn

@@ -0,0 +1,39 @@
+client
+dev tun
+proto tcp
+
+
+
+
+remote SK.mullvad.net 443
+
+
+cipher AES-256-CBC
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3
+remote-cert-tls server
+ping 10
+ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+
+
+
+
+auth-user-pass /config/openvpn-credentials.txt
+ca /etc/openvpn/mullvad/ca.crt
+
+
+
+tun-ipv6
+script-security 2
+
+
+
+
+
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_SK_tcp80.ovpn

@@ -0,0 +1,39 @@
+client
+dev tun
+proto tcp
+
+
+
+
+remote SK.mullvad.net 80
+
+
+cipher AES-256-CBC
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3
+remote-cert-tls server
+ping 10
+ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+
+
+
+
+auth-user-pass /config/openvpn-credentials.txt
+ca /etc/openvpn/mullvad/ca.crt
+
+
+
+tun-ipv6
+script-security 2
+
+
+
+
+
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_SK_udp.ovpn

@@ -0,0 +1,39 @@
+client
+dev tun
+proto udp
+
+
+
+
+remote SK.mullvad.net 1197
+
+
+cipher AES-256-CBC
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3
+remote-cert-tls server
+ping 10
+ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+fast-io
+
+
+
+auth-user-pass /config/openvpn-credentials.txt
+ca /etc/openvpn/mullvad/ca.crt
+
+
+
+tun-ipv6
+script-security 2
+
+
+
+
+
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_SK_udp53.ovpn

@@ -0,0 +1,39 @@
+client
+dev tun
+proto udp
+
+
+
+
+remote SK.mullvad.net 53
+
+
+cipher AES-256-CBC
+resolv-retry infinite
+nobind
+persist-key
+persist-tun
+verb 3
+remote-cert-tls server
+ping 10
+ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+fast-io
+
+
+
+auth-user-pass /config/openvpn-credentials.txt
+ca /etc/openvpn/mullvad/ca.crt
+
+
+
+tun-ipv6
+script-security 2
+
+
+
+
+
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_at_tcp443.ovpn

@@ -1,23 +1,31 @@
 client
 dev tun
 proto tcp
+
+
+
+
 remote at.mullvad.net 443
+
+
 cipher AES-256-CBC
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-comp-lzo
 verb 3
 remote-cert-tls server
 ping 10
 ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+
 
 
 
 auth-user-pass /config/openvpn-credentials.txt
-ca /etc/openvpn/mullvad/mullvad_ca.crt
-crl-verify /etc/openvpn/mullvad/mullvad_crl.pem
+ca /etc/openvpn/mullvad/ca.crt
 
 
 
@@ -28,6 +36,4 @@ script-security 2
 
 
 
-
-
-tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-SEED-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_at_tcp80.ovpn

@@ -1,23 +1,31 @@
 client
 dev tun
 proto tcp
+
+
+
+
 remote at.mullvad.net 80
+
+
 cipher AES-256-CBC
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-comp-lzo
 verb 3
 remote-cert-tls server
 ping 10
 ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+
 
 
 
 auth-user-pass /config/openvpn-credentials.txt
-ca /etc/openvpn/mullvad/mullvad_ca.crt
-crl-verify /etc/openvpn/mullvad/mullvad_crl.pem
+ca /etc/openvpn/mullvad/ca.crt
 
 
 
@@ -28,6 +36,4 @@ script-security 2
 
 
 
-
-
-tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-SEED-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA

openvpn/mullvad/mullvad_at_udp.ovpn

@@ -1,23 +1,31 @@
 client
 dev tun
 proto udp
-remote at.mullvad.net 1302
+
+
+
+
+remote at.mullvad.net 1194
+
+
 cipher AES-256-CBC
 resolv-retry infinite
 nobind
 persist-key
 persist-tun
-comp-lzo
 verb 3
 remote-cert-tls server
 ping 10
 ping-restart 60
+sndbuf 524288
+rcvbuf 524288
+
+fast-io
 
 
 
 auth-user-pass /config/openvpn-credentials.txt
-ca /etc/openvpn/mullvad/mullvad_ca.crt
-crl-verify /etc/openvpn/mullvad/mullvad_crl.pem
+ca /etc/openvpn/mullvad/ca.crt
 
 
 
@@ -28,6 +36,4 @@ script-security 2
 
 
 
-
-
-tls-cipher TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA:TLS-DHE-RSA-WITH-SEED-CBC-SHA:TLS-DHE-RSA-WITH-CAMELLIA-128-CBC-SHA
+tls-cipher TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA