diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 21:43:55 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 21:43:55 +0900 |
| commit | 71e307963829e7a4a7f7277829a2a60791747cb2 (patch) | |
| tree | 2244155521572b635828f300e1fd1076931ceccd /vpn/.gitignore | |
| parent | d99eef8641fe819cb0cc90e7eea0514b769e6389 (diff) | |
Force send ISRG Root X1 via local.cacerts for Android compat
strongSwan skips self-signed root CAs from CERT payloads by default.
Setting cacerts = chain-3.crt in the local section forces it to include
ISRG Root X1 explicitly so Android 12 can complete trust chain validation.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/.gitignore')
0 files changed, 0 insertions, 0 deletions