On 11/01/18 20:52, Patrick Schaaf wrote:
> On Thu, Jan 11, 2018 at 11:39 AM, Antonio Quartulli <[email protected]> wrote:
>>> Meanwhile, iOS clients (e.g. iOS 11.2.1, 11.2.2, openVPN app 1.2.5)
>>> are no longer able to connect at all. The .p12 certificate looks
>>> installed in the keystore, and can be reinstalled properly, but
>>> selecting the certificate says "No certificates are present in the
>>> Ke..."
>>>
>> This is unfortunately a known change in behaviour.
>>
>> In a nutshell: the App now has restricted access to the iOS keychain and
>> can only retrieve items that were imported by the app itself.
>>
>> This means that .p12 files manually imported via Safari/Mail are not
>> accessible by OpenVPN Connect as they are handled by iOS directly.
>>
>> In order to continue supporting the use of the keychain, we had to
>> introduce a new file extension and associate it with OpenVPN Connect:
>> .ovpn12
>>
>> Therefore, in order to use your PKCS#12 files with OpenVPN Connect on
>> iOS, you need to change their extension from .p12 to .ovpn12 and then
>> proceed as usual.
>>
>> When opening a .ovpn12 file with Safari/Mail OpenVPN Connect will
>> automatically show up and attempt to import the key material.
> 
> Thank you very much! That helped, my iOS users are happy once more!

Glad to hear that!

Regards,


-- 
Antonio Quartulli

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to