sudo -s
apt install curl -y
mkdir -p /etc/apt/keyrings # directory does not exist on older releases
curl -fsSL https://swupdate.openvpn.net/repos/repo-public.gpg | gpg --dearmor > /etc/apt/keyrings/openvpn-repo-public.gpg
 
echo "deb [arch=amd64 signed-by=/etc/apt/keyrings/openvpn-repo-public.gpg] https://build.openvpn.net/debian/openvpn/stable noble main" > /etc/apt/sources.list.d/openvpn-aptrepo.list
 
apt update && apt install openvpn -y
#apt-get install openvpn-dco-dkms

tee ./sovintegra_citrix.ovpn << EOF
client
dev tun
proto tcp
remote rum-g.sovintegra.com 1194
resolv-retry infinite
nobind
persist-key
persist-tun
<ca>
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
</ca>
data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC
data-ciphers-fallback AES-256-CBC
auth-user-pass
route 192.168.100.0 255.255.255.0
EOF

sudo openvpn --config ./sovintegra_citrix.ovpn