<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Arial,Helvetica,sans-serif;" dir="ltr">
<p>Dear All,</p>
<p>I was using a ECC certificate(P-384)(secp384r1) to configure for my IKEv2 VPN, and I used a script to set up a VPN</p>
<p><a href="https://github.com/quericy/one-key-ikev2-vpn" class="OWAAutoLink" id="LPlnk780933" previewremoved="true">https://github.com/quericy/one-key-ikev2-vpn</a><br>
<br>
</p>
<p>This script is used for more common RSA certs, but I have a ECC cert, so I can't connect my vpn after creation.</p>
<p>Please help me with the config files.</p>
<p><br>
</p>
<p>ipsec.conf:</p>
<p><br>
</p>
<p>config setup</p>
<p> uniqueids=never</p>
<p><br>
</p>
<p>conn iOS_cert</p>
<p> keyexchange=ikev1</p>
<p> fragmentation=yes</p>
<p> left=%defaultroute</p>
<p> leftauth=pubkey</p>
<p> leftsubnet=0.0.0.0/0</p>
<p> leftcert=server.cert.pem</p>
<p> right=%any</p>
<p> rightauth=pubkey</p>
<p> rightauth2=xauth</p>
<p> rightsourceip=10.31.2.0/24</p>
<p> rightcert=client.cert.pem</p>
<p> auto=add</p>
<p><span style="font-size: 12pt;"><br>
</span></p>
<p><span style="font-size: 12pt;">conn android_xauth_psk</span><br>
</p>
<p> keyexchange=ikev1</p>
<p> left=%defaultroute</p>
<p> leftauth=psk</p>
<p> leftsubnet=0.0.0.0/0</p>
<p> right=%any</p>
<p> rightauth=psk</p>
<p> rightauth2=xauth</p>
<p> rightsourceip=10.31.2.0/24</p>
<p> auto=add</p>
<p><br>
</p>
<p>conn networkmanager-strongswan</p>
<p> keyexchange=ikev2</p>
<p> left=%defaultroute</p>
<p> leftauth=pubkey</p>
<p> leftsubnet=0.0.0.0/0</p>
<p> leftcert=server.cert.pem</p>
<p> right=%any</p>
<p> rightauth=pubkey</p>
<p> rightsourceip=10.31.2.0/24</p>
<p> rightcert=client.cert.pem</p>
<p> auto=add</p>
<p><br>
</p>
<p>conn ios_ikev2</p>
<p> keyexchange=ikev2</p>
<p> ike=aes256-sha384-ecp384!</p>
<p> rekey=no</p>
<p> left=%defaultroute</p>
<p> leftid= My domain name goes here</p>
<p> leftsendcert=always</p>
<p> leftsubnet=0.0.0.0/0</p>
<p> leftcert=server.cert.pem</p>
<p> right=%any</p>
<p> rightauth=eap-mschapv2</p>
<p> rightsourceip=10.31.2.0/24</p>
<p> rightsendcert=never</p>
<p> eap_identity=%any</p>
<p> dpdaction=clear</p>
<p> fragmentation=yes</p>
<p> auto=add</p>
<p><br>
</p>
<p>conn windows7</p>
<p> keyexchange=ikev2</p>
<p> ike=aes256-sha384-ecp384!</p>
<p> rekey=no</p>
<p> left=%defaultroute</p>
<p> leftauth=pubkey</p>
<p> leftsubnet=0.0.0.0/0</p>
<p> leftcert=server.cert.pem</p>
<p> right=%any</p>
<p> rightauth=eap-mschapv2</p>
<p> rightsourceip=10.31.2.0/24</p>
<p> rightsendcert=never</p>
<p> eap_identity=%any</p>
<p> auto=add</p>
<p><br>
</p>
<p>Although I don't think this is directly related, I add strongswan.conf here</p>
<p><br>
</p>
<p>strongswan.conf<br>
</p>
<p> charon {</p>
<p> load_modular = yes</p>
<p> duplicheck.enable = no</p>
<p> compress = yes</p>
<p> plugins {</p>
<p> include strongswan.d/charon/*.conf</p>
<p> }</p>
<p> dns1 = 8.8.8.8</p>
<p> dns2 = 8.8.4.4</p>
<p> nbns1 = 8.8.8.8</p>
<p> nbns2 = 8.8.4.4</p>
<p>}</p>
<p>include strongswan.d/*.conf</p>
<p><br>
</p>
<p>Please help me with this issue. I really appreciate it.</p>
<p>Thank you.</p>
<p>Mike</p>
<p><br>
</p>
</div>
</body>
</html>