From 26589a118eedcb01bc9ce54b5c9a899aa919a7f5 Mon Sep 17 00:00:00 2001
From: w2ak <w2ak@users.noreply.github.com>
Date: Thu, 4 Jan 2018 19:10:46 +0100
Subject: [PATCH] [ovpn_getclient] key-direction before tls-auth

NetworkManager seems to be ignoring the `key-direction` directive when
it is after the `tls-auth` key, leading to issues as #268.

Signed-off-by: w2ak <w2ak@users.noreply.github.com>
---
 bin/ovpn_getclient | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/bin/ovpn_getclient b/bin/ovpn_getclient
index 9619e25..092aeea 100755
--- a/bin/ovpn_getclient
+++ b/bin/ovpn_getclient
@@ -58,10 +58,10 @@ $(openssl x509 -in $EASYRSA_PKI/issued/${cn}.crt)
 <ca>
 $(cat $EASYRSA_PKI/ca.crt)
 </ca>
+key-direction 1
 <tls-auth>
 $(cat $EASYRSA_PKI/ta.key)
 </tls-auth>
-key-direction 1
 "
     elif [ "$mode" == "separated" ]; then
         echo "