diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:29:36 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:29:36 +0900 |
| commit | acff0eebed7cd89a5b50db2366cd055d6aed67de (patch) | |
| tree | eff62ffa17823653e2e97466a061620f2bbb01f7 /caddy | |
| parent | 11b6518b75e06dcd716bf04e133ef1a67c591cae (diff) | |
Remove intermediate CA cert mount to fix Android IKEv2 fragmentation
Android (XREAL Beam Pro) advertises FRAG_SUP but fails to reassemble
IKE fragments. The IKE_AUTH response was 1776 bytes (leaf + YE1 intermediate)
requiring fragmentation into 2 packets. Without x509ca mount, only the leaf
cert is sent (~886 bytes total), fitting in a single packet without fragmentation.
Android fetches the intermediate CA (YE1) via AIA extension before tunnel setup.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'caddy')
0 files changed, 0 insertions, 0 deletions