client
dev tun
proto udp
remote vpn.domain.ru
resolv-retry infinite
nobind
persist-key
persist-tun
ns-cert-type server
comp-lzo
verb 3

<ca>                                            
-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----
</ca>                                           
<cert>
-----BEGIN CERTIFICATE-----
…
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
…
-----END PRIVATE KEY-----
</key>
key-direction 1
<tls-auth>
-----BEGIN OpenVPN Static key V1-----
…
-----END OpenVPN Static key V1-----
</tls-auth>

script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf