[strongSwan] VPN for iOS 10, "deleting half open IKE_SA after timeout"

[Tobias Brunner]

Hi Klaus,

> Is that necessary? I use
> username/password authentication of the clients and the clients don’t
> care about the server certificate.

Yes, the CA certificate (caCert.der) has to be installed on the clients.
 They won't trust the server certificate otherwise.

Regards,
Tobias