diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:48:36 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:48:36 +0900 |
| commit | 47e47957cc363511d1de5f78caff7ff77ed7d0c7 (patch) | |
| tree | bd18418d49742bf285b010c59b03a462383b8c3a /vpn/strongswan.conf | |
| parent | acff0eebed7cd89a5b50db2366cd055d6aed67de (diff) | |
Serve YE1 intermediate CA cert for Android VPN trust chain
Android (XREAL Beam Pro) can't validate the server cert because it lacks
the Let's Encrypt YE1 hierarchy in its system trust store. The fix:
- Serve YE1 cert at https://vpn.yyamashita.com/ca.pem via Caddy
- Android VPN profile: set CA certificate to this downloaded cert
- install.sh / renew-cert.sh now extract and copy YE1 to caddy dir
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/strongswan.conf')
0 files changed, 0 insertions, 0 deletions