Closed aflashback closed 4 months ago
Describe the issue in ikev2setup.sh file export_p12_file method I see all openssh commands are using sha1 shouldn't this be sha2 , is there a reason ?
example: openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES
Sadly, Apple doesn’t support all pkcs12 wrappings. It doesn’t do aes, only 3des. Not sure if it supports sha2
Paul
@aflashback Hello! Yes, this is mainly for compatibility with VPN client devices, such as iPhones and iPads. For a personal VPN, using 3DES and SHA1 for IKEv2 certificates should be fine from a security perspective.
Checklist
Describe the issue in ikev2setup.sh file export_p12_file method I see all openssh commands are using sha1 shouldn't this be sha2 , is there a reason ?
example: openssl pkcs12 -keypbe PBE-SHA1-3DES -certpbe PBE-SHA1-3DES
Thanks!