search

openiked / openiked-portable

Internet Key Exchange version 2 (IKEv2) daemon - portable version of OpenBSD iked
https://openiked.org
ISC License
44 stars 23 forks source link

Linux quickstart #127

Open mrbluecoat opened 10 months ago

mrbluecoat commented 10 months ago

Similar to #100, I wanted to try out openiked on Linux (Debian) to connect Android to an IKEv2 server using X.509 authentication. sudo apt install -y openiked appears to handle installation and user creation but when I tried using this manual as recommended in the linked issue the first command ikectl ca vpn create throws this error: ikectl: fopen /etc/ssl/x509v3.cnf: No such file or directory which is because that guide is for OpenBSD, not Linux. I did a bit of Internet sleuthing but couldn't find a single Linux guide. Since this repo specifically targets non BSD systems I thought maybe you could provide some pointers...

tobhe commented 9 months ago

Hi @mrbluecoat, he error you encountered was already fixed in our git repo but hadn't made it into an official release and thus into the debian package yet.

We have released a new version today. Once this version finds its way into the Debian archive it should also work there. Until then you could copy ikectl/ikex509v3.cnf from this repo to /etc/openssl as a workaround.

Overall I think there currently is no need for a separate Linux guide since most things work similarly on both platforms.