diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 19:39:22 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 19:39:22 +0900 |
| commit | a86a5b9d1f68f292e33dfc0ed04b87c5ca785382 (patch) | |
| tree | bd18418d49742bf285b010c59b03a462383b8c3a /vpn/docker-compose.yml | |
| parent | ff3b39b124cf73599b9b075ae1c7ec63f9d78f4c (diff) | |
Remove intermediate CA cert to fix IKE fragmentation
YE1 intermediate cert was inflating IKE_AUTH response to 1776 bytes,
causing it to be split into 2 IKE fragments that iOS/Android clients
could not reassemble. Both iOS and Android 12 (Beam Pro) have
Let's Encrypt trust chain in their system store, so the intermediate
cert is not needed.
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/docker-compose.yml')
| -rw-r--r-- | vpn/docker-compose.yml | 1 |
1 files changed, 0 insertions, 1 deletions
diff --git a/vpn/docker-compose.yml b/vpn/docker-compose.yml index 1961a99..83ff270 100644 --- a/vpn/docker-compose.yml +++ b/vpn/docker-compose.yml @@ -8,7 +8,6 @@ services: - SYS_MODULE volumes: - ./certs/server.crt:/etc/swanctl/x509/server.crt:ro - - ./certs/server-chain.crt:/etc/swanctl/x509ca/server-chain.crt:ro - ./certs/server.key:/etc/swanctl/private/server.key:ro - ./users.conf:/etc/strongswan/users.conf:ro environment: |