On Sat, Oct 10, 2026 at 10:11:25PM +0000, Christian Zoepfchen wrote:
> Synopsis: iked rejects ECDSA-384 signature authentication from macOS/iOS
> native IKEv2 clients
> Category: system
> Environment:
> System : OpenBSD 7.9 (amd64, GENERIC.MP, syspatches 001-034), iked
> from base
> Peer : macOS 26.6.2 (Tahoe), native IKEv2 client
> (NEIKEv2Provider), configuration profile
> with CertificateType=ECDSA384 and a P-384 client certificate
> Description:
> With a P-384 client certificate the Apple client authenticates with AUTH
> method 10
> (ECDSA-384, RFC 4754). It does not send r|s as 2x48 bytes; instead it
> pads r and s with
> leading zeros to 2x104 bytes (104 = maximum DER length of a P-384
> signature), so the AUTH
> data is 208 bytes long. Apple's own log shows
> Authentication Protocol = ECDSA384
> Authentication Data = {length = 208, bytes = 0x00000000 00000000
> 00000000 00000000 ... }
This sounds like a bug that Apple should fix, not necessarily something
iked should work around. Did you report this to them?
