Re: [strongSwan] Apple IOS 10 VPN

2016-10-30 Thread Turbo Fredriksson
On 30 Oct 2016, at 16:59, Turbo Fredriksson  wrote:

> I’ve been following this myself and it works on my Android phone, but not on 
> my
> new OSX 10.12.1.

Oops, sorry for vasting space and oxygen.. The keyword here is “new OSX”. I 
forgot to
add my CA to the list of accepted CAs. Did it years ago on my old machine of 
course, but
completely forgot I had to do it on this one as well :).
___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Re: [strongSwan] Apple IOS 10 VPN

2016-10-30 Thread Turbo Fredriksson
On 30 Oct 2016, at 01:09, Derek Cameron  wrote:

> Here is a configuration that works for iOS 10: 
> http://xpu.ca/strongswan-ubuntu/ 

I’ve been following this myself and it works on my Android phone, but not on my
new OSX 10.12.1.

I get

looking for peer configs matching 
[]…[turbo]
no matching peer config found

On Android, I don’t have to enter the remote ID and it works with or without 
that (ends
up as “looking for … [%any]”). But on OSX I _must_ enter that.

Comparing the two connection attempts, that ‘looking for peer configs’ is 
_identical_, but
the OSX client doesn’t work.


If I don’t enter the ‘Local ID’ (it’s optional), then the ‘[turbo]’ parts ends 
up as it’s local
NAT address.

My config:

— snip —
config setup

conn %default
keyexchange=ikev2
left=
leftid=“"
leftcert=server.pem
leftsubnet=0.0.0.0/0
right=%any
rightsourceip=192.168.6.0/24
rightdns=192.168.6.1
dpdaction=clear
— snip —

I had to put the DN in there because I got:

loaded certificate “" from ’server.pem'
id ’server.domain.tld' not confirmed by certificate, defaulting to 
‘’
___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

[strongSwan] Apple IOS 10 VPN

2016-10-29 Thread Derek Cameron
Jim,

Here is a configuration that works for iOS 10: http://xpu.ca/strongswan-ubuntu/

Derek.

> Can anyone share a working configuration between Strongswan and
> Apple IOS 10?
>
> ___
>
>
> Jim Buttafuoco
> jim at contacttelecom.com
> 603-647-7170
> 603-490-3409 - Cell
> jimbuttafuoco - Skype
___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

[strongSwan] Apple IOS 10 VPN

2016-10-04 Thread Jim Buttafuoco
Can anyone share a working configuration between Strongswan and Apple IOS 10?

___










Jim Buttafuoco
j...@contacttelecom.com
603-647-7170
603-490-3409 - Cell
jimbuttafuoco - Skype







___
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users