diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 00:41:24 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-02 00:41:24 +0900 |
| commit | f6f06e6aa292110bf774fa1ff4591c288b275305 (patch) | |
| tree | 00582f2f1fdc7b70d32c17242d082f3af415489d /vpn/strongswan.conf | |
| parent | c463eddaab816b6ffe032f37f4228e4b22a1425d (diff) | |
Send only YE1+RootYE intermediates, skip cross-signed ISRG Root X2
iOS 14+ and Android 11+ have ISRG Root X2 in their trust store.
Sending the cross-signed ISRG Root X2 alongside the trusted
self-signed version can confuse the cert path-building algorithm.
Chain: leaf -> YE1 -> Root YE -> [ISRG Root X2 from trust store]
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/strongswan.conf')
0 files changed, 0 insertions, 0 deletions