diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:16:13 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:16:13 +0900 |
| commit | 11b6518b75e06dcd716bf04e133ef1a67c591cae (patch) | |
| tree | afb24a215bed7c7b9b0d74e0820eaaf78bfe3e98 /vpn/strongswan.conf | |
| parent | dd15de090cc70454f5039f8a1a9bb1d98358435b (diff) | |
Fix VPN: send certificate always, split cert chain, fix entrypoint
- swanctl.conf.tpl: send_cert = always (fix Android cert verification failure)
- docker-compose.yml: mount intermediate CAs to /etc/swanctl/x509ca/
- install.sh: split server.crt into leaf + chain for proper chain distribution
- entrypoint.sh: run charon directly for Docker log visibility,
fix sysctl error handling, fix charon binary path
- strongswan.conf: increase IKE log level to 4 for debugging
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/strongswan.conf')
| -rw-r--r-- | vpn/strongswan.conf | 5 |
1 files changed, 3 insertions, 2 deletions
diff --git a/vpn/strongswan.conf b/vpn/strongswan.conf index b42f8c0..eeed46c 100644 --- a/vpn/strongswan.conf +++ b/vpn/strongswan.conf @@ -6,8 +6,9 @@ charon { filelog { stderr { default = 1 - ike = 2 - knl = 3 + ike = 4 + cfg = 3 + knl = 2 } } send_vendor_id = no |