ELF@@8@ll000 XXX``$$PtdЩЩЩQtdRtd000 GNUtq \!+"{և+M" u@ 9    (Q      ]  FU@!I  v%Ym  F"SW/(E`z1 Z I t > oS = y=      |L4   1 \    R fi   2}  ! s ! 9: m O , o m $   >    .,  a m  __gmon_start___ITM_deregisterTMCloneTable_ITM_registerTMCloneTable__cxa_finalizegtk_widget_get_typeg_type_check_instance_is_agtk_widget_get_style_contextgtk_style_context_add_classg_return_if_fail_warninggtk_style_context_remove_classg_file_get_basenamegtk_label_set_labelg_freeg_dgettextgtk_file_chooser_get_filegtk_widget_hidegtk_file_chooser_set_fileg_object_unrefgtk_widget_get_rootgtk_window_get_typegtk_window_set_transient_forgtk_widget_show__stack_chk_guardg_snprintfgtk_builder_get_objectnma_cert_chooser_get_certnma_cert_chooser_get_keynma_cert_chooser_get_key_passwordnma_cert_chooser_get_key_password_flagsnm_setting_set_secret_flagsnm_setting_vpn_add_data_itemnm_setting_vpn_add_secret__stack_chk_failgtk_editable_get_textnma_utils_menu_to_secret_flagsstrcmpg_strdupg_hash_table_insertgtk_check_button_get_activegtk_widget_set_sensitivegtk_combo_box_get_active_itergtk_combo_box_get_modelgtk_tree_model_getg_strcmp0gtk_list_store_newgtk_combo_box_set_modelgtk_list_store_appendgtk_list_store_setgtk_combo_box_set_activegtk_combo_box_get_activegtk_check_button_set_activegtk_entry_set_visibilityg_mallocg_ascii_tableg_signal_stop_emission_by_nameg_signal_handlers_block_matchedgtk_editable_insert_textg_signal_handlers_unblock_matchedgtk_widget_get_sensitivegtk_editable_get_charsnm_utils_is_valid_iface_namegtk_editable_set_textgtk_check_button_get_typegtk_spin_button_get_typeg_signal_connect_datagtk_spin_button_set_valueg_type_class_peek_parentg_type_class_add_privateg_intern_static_stringg_type_register_static_simplenm_vpn_editor_get_typeg_type_add_interface_staticg_once_init_enterg_once_init_leaveg_type_instance_get_privateg_hash_table_destroyg_signal_emit_by_namegtk_notebook_set_current_pageg_assertion_message_exprgtk_window_destroyg_object_get_datag_str_equalg_str_hashg_hash_table_new_fullg_file_get_pathg_hash_table_removegtk_spin_button_get_value_as_intg_strdup_printfg_file_testnm_setting_802_1x_newnm_setting_802_1x_set_private_keynma_cert_chooser_set_certnma_cert_chooser_set_keynma_cert_chooser_set_cert_passwordnma_cert_chooser_validatenm_connection_error_quarkg_set_errorg_error_freeg_io_channel_new_fileg_io_channel_read_lineg_io_channel_shutdowng_io_channel_unrefstrleninet_ptong_strndupnma_cert_chooser_add_to_size_groupnm_setting_vpn_get_data_itemnm_setting_vpn_get_secretnma_utils_setup_password_storagenma_cert_chooser_set_key_passwordnma_cert_chooser_setup_key_password_storageg_signal_connect_object__errno_locationg_ascii_strtollgtk_builder_newgtk_builder_set_translation_domaingtk_builder_add_from_resourcegtk_window_set_modalg_object_set_data_fullg_hash_table_lookupg_object_bind_propertygtk_entry_set_max_lengthgtk_entry_set_placeholder_textg_spawn_syncg_strsplitstrchrg_logg_ascii_strcasecmpgtk_combo_box_set_active_itergtk_window_set_hide_on_closeg_file_new_for_pathgtk_window_group_add_windowg_strfreevgtk_notebook_remove_pagegtk_list_store_insertstrsepg_utf8_validateg_strchompstrrchrg_quark_from_static_stringnm_setting_vpn_newg_object_setg_hash_table_foreachnm_connection_add_settingnm_vpn_editor_factory_openvpnnma_cert_chooser_get_typeg_type_ensurenm_connection_get_typeg_object_newg_object_ref_sinkgtk_window_group_newnm_connection_get_setting_vpnnm_setting_vpn_foreach_data_itemgtk_file_filter_newgtk_file_filter_add_patterngtk_file_filter_set_namegtk_file_chooser_add_filterg_set_error_literalg_static_resource_initg_static_resource_finilibgtk-4.so.1libnma-gtk4.so.0libnm.so.0libgio-2.0.so.0libgobject-2.0.so.0libglib-2.0.so.0libc.so.6ld-linux-aarch64.so.1libnm-gtk4-vpn-plugin-openvpn-editor.soGLIBC_2.17libnma_1_2_0libnma_1_8_0libnm_1_6_0libnm_1_0_0M C  0  pUpU0D8C@pDHCPX`0hpxP@h p8 (0p8@`HxPX0`hpx0pHX ((0088@@HHPP`P (08@pHPHXhppxH *HRTst     (08@HPX`hpx!"#$%&'()*+,-. /(00182@3H4P5X6`7h8p9x:;<=>?@ABCDEFGIJKLMNO P(Q0S8T@UHVPWXX`YhZp[x\]^_`abcdefghijklmnop q(r0s8t@uHvPwXx`yhzp{x|}~ (08@HPX`hpx {{_{fE"+    jEB+ nEb+ rE+ vE+ zE+ ~E+ E, E", EB, Eb, E, E, E, E, E- E"- EB- Eb- E- E- E- E- E. E". EB. Eb. E. E. E. E. E/ E"/ EB/ Eb/ E/ E/ E/ E/ F0 F"0  FB0 Fb0 F0 F0 F0 F0 "F1 &F"1 *FB1 .Fb1 2F1 6F1 :F1 >F1 BF2 FF"2 JFB2 NFb2 RF2 VF2 ZF2 ^F2 bF3 fF"3 jFB3 nFb3 rF3 vF3 zF3 ~F3 F4 F"4 FB4 Fb4 F4 F4 F4 F4 F5 F"5 FB5 Fb5 F5 F5 F5 F5 F6 F"6 FB6 Fb6 F6 F6 F6 F6 F7 F"7 FB7 Fb7 F7 F7 F7 F7 G8 G"8  GB8 Gb8 G8 G8 G8 G8 "G9 &G"9 *GB9 .Gb9 2G9 6G9 :G9 >G9 BG: FG": JGB: NGb: RG: VG: ZG: ^G: bG; fG"; jGB; nGb; rG; vG; zG; ~G; G< G"< GB< Gb< G< G< G< G< G= G"= GB= Gb= G= G= G= G= G> G"> GB> ?#{{#`4   ?#{{#`G@_  !?T!Ga_!!"A !ABGb_ { `C9@7G@ R`9 @{¨_     ?#{{#_  ?#{"@2!{#!@_?#{{#__ ?#{ S`@@T 4 @A{¨#! @B{¨#BA!$?#{ nS`@@T 4 @A{¨#! @A{¨#!!`BB ?#{SM 8SA{¨#A@! SA{¨#(?#{S? 1To0DSA{è#nSA{è#_[`@@?#{SS`@@T 4SSA{¨#>SAA{¨#!!BB?#G{ @W@ S  [ BB` cC{\3,`@9 5 `@95.`@95*GW@@BAT{KSL[McN{@#_c GW@@BTSLA!B! B {K#%!GW@"@cTA!B! BA!! BB [S [ c{V[ c{R ?#CcG{ d@OҠ S [ BB `@95BB U`@9`5 *GO@@BT{JSK[LC#_A!@ z GO@@BATSKA!B!B {JC#է!GO@"@cATA!B!B[ S [ ?#{S[Bczsa 4s!TSA[BcC{Ĩ#_sTxsBzs[BSAcC{Ĩ# ?#{ * @{¨#ՙ?#{@S *A! *A! *SA{¨#  ?#{@S` *A! *lA!@ *SA{¨#c  ?#{@S *A!*SA{¨#M?#{SA!@A!*7*@SA{è#. ?#BG{S[A! C@#A!A!q5!R !RG@@BT{CSD[E#_"R@A! >5R@A!@@9.**!R5LR@!R5>_$?#{S!@9a5SAA{è#!!"Bn!!`5@SA{è#G@SA{è#A!"!BR ?#BG{S#[63"@@@RL\!!!% $RR4q!6!@b$RR#\5!RdG@@BҁT{CSD[E3@#_RQG  ?#{ S*!!q*%!!*!!@q*!!@*SA{è# ?#CB F#{ @S ХG[ E@@OB A=e@Bb =`pq"*ןA]*a@a qT!!SqTGO@@BҁT{Jq[LSKǟC#!C!@;Ra@a!!3!R?#{S!!"!! `4R@SA!R{è#՛@SAR{è#Ք?#{S!!!!`4R@SA!R{è#v@SAR{è#o  ?#{S!*! *SA{¨#?#{S*B[@|@cq-TGe4R@ !"_8_qTChcxg@738sT38qT!!SA[BcC{Ĩ# RRRN*RRR9 ?#{S[=*RHv4@95!RSAR[B{è#_q 5jR ?#{S!![R!!M!!G,@4)*$*SA[B{è#ծA! R ?#{S*#S`@@T 4*SA{¨#_A!!@"B@SSA{¨#_ ?#{gS[*X`@@T4Y@@T4R!B3!@a^c*X@*[BSA{Ĩ#՜SAA[B!@!{Ĩ#"B@SAA[B!@!{Ĩ#"B?#{ CtD/` @{¨#_?#!G {`"@RRR@c)  G@@BT{B@#_ ?#{St"s`@SA{¨#_4sB`@SA{¨#_?#{Sd@` +`@`'`@`#`@`c`@`SA!t@{¨#!@ ?#{ <@ @{¨#_  ?#{{#!!?#{S[* 1T@`[B`!SA!{è#ja@SA[B{è#բ ?#BG{S[#@@n 4"R@!!@!!6G@@B!T{CSD[E#_Cc$!c`!CR: ?#{ ? @{¨#R ?#cG{S*[c`@1>T@`U4@cG!GkGF!!eLY5!!_F[5!!Y@ S5!!@S:T5!!@ M4N5!! GR*[5!!$@'$5`D#c!!%d@yc@9DyC9%!!&-'5!!`''(5!!!*5!! (@+5!!(,5!!`) n5!! * l5!! +i5!!+g5!!,c0`c5!!,`5!!-]5!! .7`@9a>5!!.`*4#Rcr!! /C!!/`@9:5!! 00!!`04!!0:5!! K!!y @9l5!! c5!!` z`5!!q`eT qgTq`OT!! 3a !>Q@9P4]!!3h\!!3K@k`!!@4eL` 5!!5_F "5!!5Y@@%5!! S:'5!!M4@)4!!6G&D`@9n5(!!78C5kHG@@BAvT{DSE![F!cG#՛!!@%&a4?qDT!5 !!%!! & ?q nT]T?q`mT? qlT ?qT!!`&!!&4#Rcr!!@'C!!`'4#Rcr!!'C!!@4#Rcr!!'C!! (4#Rcr!!(C!!(4!!8q!!ҫ@!!)C!!@9A4w!!@){/G@@BҡaT{DSE[FcG#8!! /LK@!!3q@94P!!4[!!@4cJ4!!4],* \!!4G!!5O6 4!!@IT*!!C*q"B8C <(!!504!!5** )!!@6!! @4!!!q`NTqMT5 !!6!!5!! 4!!`7@9A4!!7V!!/'!!`.!! @5(!! * !! !! *4S!!* !!!!@`4!!v* !! !!@ 4!!@a* !!|!!k4!!`~M* }!!h!!pW4!!@!i`@9 4q :T q5TB!! "M!!`"U$qL1T!!#N515qT!!#F @94%!!$0!! 8 @94!!`!4* *!!`$Ҋ!!7`4#Rcr!!`8CkH!!2 )@9)4!!`2d` "RCB @!!.!!@-* !!-3C$RR #@ 5 @!!, @+#Rcr!!@,Cҹ#Rcr!!+CҮ#Rcr!!*Cң#Rcr!!)C!!@ w4"RC @!!1n!! u^4"RC @!!1U!!2\;@947!!2B !!2G& *ҧ'@4C"R @!!  4!!@ 5!!0 @}?q@T @?qa|T!!& !!!"BMk!!54C"RE@7 !!2]!!!(@9!4!!2=!! 76* !!"n#Rcr!!`#CiҸ#c"!!!d@c@yDCyE      Ҙ#c!!!!d@c@9DC9y% 1!! 1n @]kK ?#!G{C"@S@95SBR!R`4CRASB@ q!G@"@cT{A#_!!!`"B8SBRS  ?#CBG{CS[#A@@ qTG@@BaT{ASB[C#@C#_֒`4**a  ?#CBG{CS[#A@woh 4d5A?=G@@BAT{ASB[C#@C#_M@5I@4R!!  Օ< 4R74BR.8?#G{ S ["cB8@_ C 4"B`9yt43`@9a5Q R* @$9#E@c@9R @R!G_@"@c!T{LSM[NcO#_* @$ 9#` 5!!c@lqTRZTT@Jm!_@TT@ҠE?T@ ɉi@*?T @Ҡ@*?T@*Ҁd(?!T"@Rr?kT@9q!TR" Ur!T*#c:R7D@Li_!T@A*Rr_kT*@yR_kT]?#BG{C@ҁ4@9?lqT#@RqG@@B!T{B*@#_*a!_8?tq!T`#@Rq(?#G{@@c"B8[Sk7sr:n<R!!`0F`5:;RA @58"C3R!! 9`@955 5G@@BҡT{VSW[XcYkZs[#_!!0q!!0q:A ;R 4|4@"B`9J:dAR7I}!G@"@cT{V!!!"#BH@"B !!!@ 0`@959C3R@"B R A `|$RC *Rw@"B`9:"C3R!!9` @9 5!!;`@9@57:`\R:$R*RB RB/9C3R@"B җhRҝBR<4 pBRBRS[cks?#CѤG{C[@GSc@9@Ӂjax@6`@8ӄjdxG7`5SBcDR!G@"@cT{A[CC#_ֿBRe@A5@@94!ӄjax@6 @8eӅjexG75XTSBcDSB@RcDSBcDSBRcDSc  ?#ѠG{Ss@sC@ Qs2`@@T @@14@!! ;q,TBR @GC@#c!7 !#!;4!!=k@[*cG@!!#@ocG!! 0!!!!{@/"B@!!m!! i*!!>R!!@>R!!`>~R!! "!!"{@9q$@`T @9`5@ 9!#$RR$R*1!!!a!9R!!4!!"q9{Sx*B R!!3!!>BR!!@'!! /C!қ"B !!@ !!!҉"B`!!!! {@w"B!!!! e"B!!@!!%!!/* 57R!!@%*2!!&!!`&!! 4!!  4!!4@ @4 4!!4!!@4!! &bR!!$4#!c@ ! DRIF!!"!B`;ҙC@G@@BҁT{RSSsW#_!!!"B@4!!! 4!@%R7R&R!! & q!!$#c@ DR!! *!!@'S@5q!!&!!'Eq!!`'!!'9q!!!!(-wq!! (!!@)!!!)!!>!!(@9!R5a9RBR!!@!!!!>`4 @T,T@y.R?kT@!.q  R@(  !!?R!! ?R^*!!kRx!!@?R!B! RB@!! !!!)@5q!!`)!!*q!! *!!+sq!! +!!@,gq!!+!!,!!,3U'R@O~@R4@c!!? C?RP@ 4@RG3@V{  /!%R*R,i  R$RR+'@W 4K@R!!7K@$'@@R+@5R7@! O5Ro@9t@`4@95`@`@9RW 5RO@#c"cB?@R4O@ / +!!-!5"B@-!!,s!!-o!!.'҃`R  /@ZCUZ#R/R*B_T@@z$RR.@5'@B8R_T /@e4w!  !!0^! 1Y@Rhx !!;+@$R% RN!!+%$RR>{!! %$RR.k!! %$RR[!!@@$RRY@@9@Y49T!RLARqZX:RR! 1`@9k5B3R@i! q1f!` e1`@9 f5B5R@;ay!@ L1A!2A!!<!R'Rj!*BG!8@ER]#@U!`04!0@i5@Rh@!!` ?*$RRS#c`R$RRG%R*R#c;PR{!!`2!2!2`@9g5z@@9i5w@9 j5R['@ ! 3!!!RVRa!! BG!!@ER#@`0q4!0l@W5!3`@945B R!4`@9I5!4!B4!@4[!5W!R!@MB8R@A g9RS/ R'@ A#h@R}#@/@@YRoS@'@! b*** !6:`@9:5@RB@7 x**e!6!!!RxR! BG!ER7@! 7@u!!RzBR@j!`7!!`!R5Ra!}BG!!@ERұҾ!m@BBR@W!@6   B5!5K!`.`@9@'5!/`@9`)5!`8@!q!7!!*!! %BG ER@X @@@4 @@ @aRB@;F!B:! R=C@i[TcUkV$RRF'@S{`@9:5R:Z ;B R#T!RBR!`7!!`!RRR!BGER!7`EoOG05,4i7@ @ @ R^'@ҽ! 3m!!h!RR!! YBGERҎ!!NARҕc@R$RRs4`@'@5`s53@R8RRR5S!R!R!3"!R!4@!*5AR! .! /H!.@q!/G@`ecB'@iVRWAR!@%Ro!R !2"\!@!U!`"Ib!#C!`#!`4!$|`@95!`s`@95!`$k*'@@3@R!R&Rh6R!@%WRt6R/!@GS"R^'@R$RRF3@Sl3@OK@R!7K@I@'@8R?%a!B<ecB<ȀRRicUR\vRA@9?qTARS @9qA"TR!#[@{k!#PlRv[ck-?#ѣcG{ CS [ c s`@Ga @w@9A4 k QZR@ #F !@9A4R$'S@#4 @ ҏ'@*R@9'@?"T3R& @T4!d@#;4n@'#*qTBR{@@Ac0 # @`&4!0`E4! 74H5! L!\H@9`H4!`T`@9!5*@RcFS!*@Rc 7@ERAGG@@BaFT{I*SJ[KcLsN#_R'## 4қG@9@ xbx@6  @8 x`xG7ARA' !R 5'@AR_9'@b3'@ !R 5'@9'@!@94@9.5`@9@4@! a4! \4! W@4!@ R4!` M4! H`4! C4! > 4! 9493@74!` *RҦ@ @943R *@!!@B`;@kMX@kMF @94`@94@!93@.4! sb@B4! #L#@*Rf'@˾!3@S4!` :9*RT!!@B=@[kM *`@E`4@M$B!]@a 5`@9! 5@#; qTBR#@xZc0! 0@4! 4!04Z 5! ~ [`@95X!!B`;! Х! 9/c:B;!9#@!@@kMB! 9 !@N 5*#@@ 9E@Rc@9#@M!`8r!@ 5!,`@9A5!`$@9a4!#~@!@ @* Д"! 9c:B;!9@! F@5Х@cB5!`@R"@3@!5!9`@9;5 !&@FReR8$RR5#@1T@q`R##@?@RB@6#@a@3@! +@R!B3@!b/@R!@BcGҡ!GG{!0'vb$kw cOkPsQG_@@Ba3T{LSM[N#_"@3Ra@! ;_#@`R @c0 !zFRR$RR@@' c@!`_@%RFR*Rq@@0c ! D@FR*$RRV#UDc@RO7@!`(*$RR<yc`R$RR0m%Rc*R$!`5R`!@R;@3'@:!`R!!B "kPsQДҁ"BcB 1 65535 1194 1 10 65535 1 10 604800 1 10 1 65535 1500 1 10 65535 1300 1 10 65535 1 10 1 65535 128 1 10 1 65535 30 1 10 1 65535 30 1 10 100000000 100 1 10 Asymmetric Symmetric LZO LZ4 LZ4 v2 Automatic LZO disabled (legacy) LZO adaptive (legacy) None TLS-Auth TLS-Crypt TLS-Crypt v2 No Maybe Yes vertical 16 vertical 6 center General 0 1 6 6 _Gateway 1 1 0 0 1 Remote gateway(s), with optional port and protocol (e.g. ovpn.corp.com:1234:tcp). You can specify multiple hosts for redundancy (use commas or spaces as delimiters). config: remote 1 1 0 center vertical 6 center Authentication 0 center 6 6 0 0 start vertical 6 True False CA 5 True False User 4 page 1 start vertical 6 6 6 Password 1 0 1 User name 1 0 0 1 Password passed to OpenVPN when prompted for it. config: auth-user-pass 1 0 1 1 2 1 Username passed to OpenVPN when prompted for it. If omitted, use the name of the system user that activates the connection. config: auth-user-pass 1 1 0 2 True False CA 5 page 2 start vertical 6 6 6 Password 0 0 1 User name 0 0 0 1 Password passed to OpenVPN when prompted for it. config: auth-user-pass 1 0 1 1 2 1 Username passed to OpenVPN when prompted for it. If omitted, use the name of the system user that activates the connection. config: auth-user-pass 1 1 0 2 True False CA 5 True False User 4 page 3 6 6 12 12 12 12 Remote IP Address right 0 0 3 Local IP Address right 0 0 4 Key Direction 0 0 1 Static Key 0 0 0 Pre-shared file for Static Key encryption mode (non-TLS). config: static <file> 1 1 0 document-open-symbolic 1 0 1 IP address of the remote VPN endpoint. config: ifconfig <l> <rn> 1 1 3 1 IP address of the local VPN endpoint. config: ifconfig <l> <rn> 1 1 4 Direction for Static Key encryption mode (non-TLS). If key direction is used, it must be the opposite of that used on the VPN peer. For example, if the peer uses “1”, this connection must use “0”. If you are unsure what value to use, contact your system administrator. config: static <file> [direction] model1 0 1 1 page 4 0 1 2 Type 1 0 0 Select an authentication mode. 1 model2 0 1 0 1 end center 6 center preferences-system-symbolic center Ad_vanced… 1 Not required 0 OpenVPN Advanced Options 1 stock-preferences cancel_button ok_button 0 Advanced Properties _Cancel 1 1 _Apply 1 1 1 vertical 2 center 1 vertical 6 1 12 12 12 12 6 Use custom gateway p_ort 1 TCP/UDP port number for peer. (Default value when there is no port for gateway). config: port 1 center 1 TCP/UDP port number for peer. (Default value when there is no port for gateway). config: port adjustment1 1 1 6 Use custom _renegotiation interval 1 Renegotiate data channel key after the specified number of seconds. config: reneg-sec 1 center 1 Renegotiate data channel key after the specified number of seconds. config: reneg-sec adjustment2 1 1 6 Data _compression 1 Use fast LZO compression. config: comp-lzo 1 Enable or disable outgoing traffic compression config: allow-compression asym|yes compression-direction 0 0 0 compression 0 0 0 Use a _TCP connection 1 Use TCP for communicating with remote host. (This is a default setting only used when no protocol is specified for the gateway.) config: proto tcp-client | udp 1 6 Set virtual _device type 1 Explicitly set virtual device type and name (TUN/TAP). 1 center 1 Explicitly set virtual device type (TUN/TAP). config: dev-type tun | tap model4 0 center and _name 1 dev_entry 0 center 1 Use custom name for TUN/TAP virtual device (instead of default “tun” or “tap”). config: dev <name> 15 6 Use custom tunnel Maximum Transmission _Unit (MTU) 1 Take the TUN device MTU to be the specified value and derive the link MTU from it. config: tun-mtu 1 center 1 Take the TUN device MTU to be the specified value and derive the link MTU from it. config: tun-mtu adjustment3 1 1 6 Use custom UDP _fragment size 1 Enable internal datagram fragmentation with this maximum size. config: fragment 1 center 1 Enable internal datagram fragmentation with this maximum size. config: fragment adjustment4 1 1 Restrict tunnel TCP Maximum _Segment Size (MSS) 1 Restrict tunnel TCP MSS. config: mssfix 1 Rando_mize remote hosts 1 Randomize the order of gateways list (remote) as a kind of basic load-balancing measure. config: remote-random 1 Allow Pull FQDN 1 Allow client to pull DNS names from server config: allow-pull-fqdn 1 _Prefix remote DNS name with random string 1 Adds a random string to remote DNS name to avoid DNS caching. config: remote-random-hostname 1 IPv6 tun link 1 Build a tun link capable of forwarding IPv6 traffic config: tun-ipv6 1 6 Specify pin_g interval 1 Ping remote over the TCP/UDP control channel if no packets have been sent for at least n seconds. config: ping <n> 1 center 1 Ping remote over the TCP/UDP control channel if no packets have been sent for at least n seconds. config: ping <n> adjustment7 1 1 6 Specify _exit or restart ping 1 Exit or restart after n seconds pass without reception of a ping or other packet from remote. config: ping-exit | ping-restart <n> 1 center 1 Exit or restart after n seconds pass without reception of a ping or other packet from remote. config: ping-exit | ping-restart <n> model8 0 center 1 Exit or restart after n seconds pass without reception of a ping or other packet from remote. config: ping-exit | ping-restart <n> adjustment8 1 1 Accept authenticated packets from any address (F_loat) 1 Allow remote peer to change its IP address and/or port number, such as due to DHCP (this is the default if --remote is not used). --float when specified with --remote allows an OpenVPN session to initially connect to a peer at a known address, however if packets arrive from a new address and pass all authentication tests, the new address will take control of the session. This is useful when you are connecting to a peer which holds a dynamic address such as a dial-in user or DHCP client. Essentially, --float tells OpenVPN to accept authenticated packets from any address, not only the address which was specified in the --remote option. config: float 1 6 Specify max routes 1 Specify the maximum number of routes the server is allowed to specify. config: max-routes <n> 1 center 1 Specify the maximum number of routes the server is allowed to specify. config: max-routes <n> adjustment9 1 1 General 12 6 12 12 12 12 Encrypt packets with cipher algorithm. The default is BF-CBC (Blowfish in Cipher Block Chaining mode). config: cipher model3 0 1 0 Use custom _size of cipher key 1 Set cipher key size to a custom value. If unspecified, it defaults to cipher-specific size. config: keysize <n> 1 0 1 1 Set cipher key size to a custom value. If unspecified, it defaults to cipher-specific size. config: keysize <n> adjustment6 1 1 1 1 Authenticate packets with HMAC using message digest algorithm. The default is SHA1. config: auth model4 0 1 2 Ci_pher 1 right cipher_combo 1 0 0 _HMAC Authentication 1 right hmacauth_combo 1 0 2 Disable cipher _negotiation 1 Disable cipher negotiation between client and server. config: ncp-disable 1 0 7 Verify CRL from file 1 Check peer certificate against the specified file in PEM format. A CRL (certificate revocation list) is used when a particular key is compromised but when the overall PKI is still intact. 0 3 Verify CRL from directory 1 Check peer certificate by looking at files in the specified directory. The directory must contain files named as revoked serial numbers (the files may be empty, the contents are never read). 0 4 Check peer certificate against the specified file in PEM format. A CRL (certificate revocation list) is used when a particular key is compromised but when the overall PKI is still intact. 1 (None) 1 0 document-open-symbolic 1 3 Check peer certificate by looking at files in the specified directory. The directory must contain files named as revoked serial numbers (the files may be empty, the contents are never read). 1 1 0 document-open-symbolic 1 4 Security vertical 12 12 12 12 12 1 start 1 6 6 _Subject Match 1 tls_remote_entry 1 0 1 1 Subject or Common Name to verify server certificate information against. config: verify-x509-name subject-or-name [mode] config (legacy mode): tls-remote subject-or-name 1 1 1 Server _Certificate Check 1 tls_remote_mode_combo 1 0 0 Verify server certificate identification. When enabled, connection will only succeed if the server certificate matches some expected properties. Matching can either apply to the whole certificate subject (all the fields), or just the Common Name (CN field). The legacy option tls-remote is deprecated and removed from OpenVPN 2.4 and newer. Do not use it anymore. config: verify-x509-name subject-or-name [mode] config (legacy mode): tls-remote subject-or-name 1 model9 0 1 0 1 start 3 6 _Verify peer (server) certificate usage signature 1 Require that peer certificate was signed with an explicit key usage and extended key usage based on RFC3280 TLS rules. 1 0 0 2 _Remote peer certificate TLS type 1 remote_cert_tls_combo 0 0 1 Require that peer certificate was signed with an explicit key usage and extended key usage based on RFC3280 TLS rules. config: remote-cert-tls client|server model7 0 1 1 1 start 3 6 _Verify peer (server) certificate nsCertType designation 1 Require that peer certificate was signed with an explicit nsCertType designation. baseline start 1 0 0 2 _Remote peer certificate nsCert designation 1 remote_cert_tls_combo 0 0 1 Require that peer certificate was signed with an explicit nsCertType designation. config: ns-cert-type client|server model7 0 1 1 1 6 6 start 24 1 6 6 Key _Direction 1 direction_combo 1 0 2 Add an additional layer of HMAC authentication on top of the TLS control channel to protect against DoS attacks. In case of TLS-Crypt mode, the control channel is also encrypted. config: tls-auth <file> [direction] | tls-crypt <file> 1 1 1 0 document-open-symbolic 1 1 Direction parameter for static key mode. If key direction is used, it must be the opposite of that used on the VPN peer. For example, if the peer uses “1”, this connection must use “0”. If you are unsure what value to use, contact your system administrator. config: tls-auth <file> [direction] model5 0 1 2 Key _File 1 tls_auth_chooser 1 0 1 Mode 1 0 0 Add an additional layer of encryption or HMAC authentication. model10 0 0 0 1 0 Extra Certificates 1 1 0 3 Specify a file containing one or more PEM certs (concatenated together) that complete the local certificate chain. config: extra-certs <file> 1 1 0 document-open-symbolic 1 3 TLS cipher string 1 0 4 1 Set a value for the --tls-cipher parameter. This can be useful for working with VPNs using deprecated hashing schemes. 1 1 4 0 1 Add an additional layer of encryption or HMAC authentication. start start Additional TLS authentication or encryption 12 6 0 0 Controls min and max version allowed for TLS. start start TLS version control 12 6 0 0 start 24 1 6 6 TLS _min version 1 1 0 0 1 Sets the minimum TLS version we will accept from the peer (default is "1.0"). Examples for version include "1.0", "1.1", or "1.2". 1 1 0 TLS ma_x version 1 1 0 1 1 Set the maximum TLS version we will use (default is the highest version supported). Examples for version include "1.0", "1.1", or "1.2". 1 1 1 _or highest 1 If set and version is not recognized, we will only accept the highest TLS version supported by the local SSL implementation. 1 2 0 0 1 TLS Authentication 6 6 12 12 12 12 Proxy type: HTTP or Socks. config: http-proxy or socks-proxy model6 on 0 1 0 Proxy _Type 1 right proxy_type_combo 1 0 0 start <i>Select this option if your organization requires the use of a proxy server to access the Internet.</i> 1 1 35 0 1 1 Server _Address 1 proxy_server_entry 1 0 2 1 1 Connect to remote host through a proxy with this address. config: http-proxy or socks-proxy 1 _Port 1 right proxy_port_spinbutton 1 1 1 Connect to remote host through a proxy with this port. config: http-proxy or socks-proxy 5 adjustment5 1 1 1 2 _Retry indefinitely when errors occur 1 Retry indefinitely on proxy errors. It simulates a SIGUSR1 reset. config: http-proxy-retry or socks-proxy-retry 1 1 3 Proxy _Username 1 right proxy_username_entry 1 0 4 Proxy Passwor_d 1 right proxy_password_entry 1 0 5 1 HTTP/Socks proxy username passed to OpenVPN when prompted for it. 1 4 1 HTTP/Socks proxy password passed to OpenVPN when prompted for it. 0 1 5 _Show password 1 1 1 6 Proxies start 6 6 1 12 12 12 12 Path mtu discovery 1 0 0 start model11 0 0 0 1 0 Connect timeout 1 The timeout in seconds before trying the next server. This timeout includes proxy and TCP connect timeouts. config: connect-timeout <n> | server-poll-timeout <n> 0 1 1 The timeout in seconds before trying the next server. This timeout includes proxy and TCP connect timeouts. config: connect-timeout <n> | server-poll-timeout <n> start 0 adjustment10 1 1 Push peer info 1 Push additional information about the client to server. config: push-peer-info 1 0 2 2 Misc center 0 1 sk_key_chooser_cancel sk_key_chooser_accept 0 Choose an OpenVPN static key… _Cancel 1 _Select 1 1 1 openvpn-advanced-dialog crl_file_chooser_cancel crl_file_chooser_accept 0 Choose CRL file _Cancel 1 _Select 1 1 select-folder openvpn-advanced-dialog 1 crl_dir_chooser_cancel crl_dir_chooser_accept 0 Choose CRL directory _Cancel 1 _Select 1 1 openvpn-advanced-dialog 1 tls_auth_chooser_cancel tls_auth_chooser_accept 0 Choose a key file _Cancel 1 _Select 1 1 openvpn-advanced-dialog 1 extra_certs_chooser_cancel extra_certs_chooser_accept 0 Choose extra certificate file _Cancel 1 _Select 1 1 (uuay)freedesktop/;7tP0`(@ dPp @$pL4 $LtPФ@D|P4ЫT|@ PT 4 \ $ д D  p\ p @ 4 4 P  zRx L0,h< @HA BNd |A-ABA- 0A-AEA- A-ABA-,A-A BQ A-B CA-,A-A BQ A-B CA-0HltA-A BL A-A IA-@|A-A0BP A-A B A-A BI A A0A-A BT A-A CA-dHA-AC FCGFn AAAAA-A RHH A-A MIAAAAAAAAdA-ACFCp AAA-A JHH A-A MAAAAADxA-A@BCCO A-A RA-$80A-A BFA-$`hA-A CSA-$