diff options
| author | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:16:13 +0900 |
|---|---|---|
| committer | yyamashita <yyamashita@hetzner.yyamashita.com> | 2026-07-01 10:16:13 +0900 |
| commit | 11b6518b75e06dcd716bf04e133ef1a67c591cae (patch) | |
| tree | afb24a215bed7c7b9b0d74e0820eaaf78bfe3e98 /vpn/swanctl.conf.tpl | |
| parent | dd15de090cc70454f5039f8a1a9bb1d98358435b (diff) | |
Fix VPN: send certificate always, split cert chain, fix entrypoint
- swanctl.conf.tpl: send_cert = always (fix Android cert verification failure)
- docker-compose.yml: mount intermediate CAs to /etc/swanctl/x509ca/
- install.sh: split server.crt into leaf + chain for proper chain distribution
- entrypoint.sh: run charon directly for Docker log visibility,
fix sysctl error handling, fix charon binary path
- strongswan.conf: increase IKE log level to 4 for debugging
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Diffstat (limited to 'vpn/swanctl.conf.tpl')
| -rw-r--r-- | vpn/swanctl.conf.tpl | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/vpn/swanctl.conf.tpl b/vpn/swanctl.conf.tpl index f3a9e2e..da988e0 100644 --- a/vpn/swanctl.conf.tpl +++ b/vpn/swanctl.conf.tpl @@ -25,6 +25,7 @@ connections { pools = pool4 send_certreq = no + send_cert = always dpd_delay = 30s } } |