diff --git a/bin/ovpn_getclient b/bin/ovpn_getclient
index 9619e25..092aeea 100755
--- a/bin/ovpn_getclient
+++ b/bin/ovpn_getclient
@@ -58,10 +58,10 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
 <ca>
 $(cat $EASYRSA_PKI/ca.crt)
 </ca>
+key-direction 1
 <tls-auth>
 $(cat $EASYRSA_PKI/ta.key)
 </tls-auth>
-key-direction 1
 "
     elif [ "$mode" == "separated" ]; then
         echo "