Use PIA "strong" ovpn config files instead of current ones with weaker ciphers

[moonraker2]

Do you have the latest provider files?

• I have checked that the provider are the latest

Have you tested the provider files?

• I have tested the provider files

Can you create a PR for this config?

• I can create a PR for this

Provider details

Data encryption cipher should be AES-256-GCM (instead of the current default AES-128-CBC) as used in the official PIA VPN app, and data auth could probably be upgraded to SHA-256.
Also, why are we still using the 2048 bit CA certificate (ca.rsa.2048.crt) and not the 4096 bit one?

Link to PIA "strong" OVPN config (ZIP archive):
https://www.privateinternetaccess.com/openvpn/openvpn-strong.zip

In case you don't want to change the default, is there an easy way for me to specify that I want strong encryption in my docker compose file, or otherwise?

Anything else?

No response

[ashleyconnor]

Set the env var PIA_OPENVPN_CONFIG_BUNDLE=openvpn-strong in your compose file.