From a86a5b9d1f68f292e33dfc0ed04b87c5ca785382 Mon Sep 17 00:00:00 2001 From: yyamashita Date: Wed, 1 Jul 2026 19:39:22 +0900 Subject: Remove intermediate CA cert to fix IKE fragmentation YE1 intermediate cert was inflating IKE_AUTH response to 1776 bytes, causing it to be split into 2 IKE fragments that iOS/Android clients could not reassemble. Both iOS and Android 12 (Beam Pro) have Let's Encrypt trust chain in their system store, so the intermediate cert is not needed. Co-Authored-By: Claude Sonnet 4.6 --- vpn/docker-compose.yml | 1 - 1 file changed, 1 deletion(-) diff --git a/vpn/docker-compose.yml b/vpn/docker-compose.yml index 1961a99..83ff270 100644 --- a/vpn/docker-compose.yml +++ b/vpn/docker-compose.yml @@ -8,7 +8,6 @@ services: - SYS_MODULE volumes: - ./certs/server.crt:/etc/swanctl/x509/server.crt:ro - - ./certs/server-chain.crt:/etc/swanctl/x509ca/server-chain.crt:ro - ./certs/server.key:/etc/swanctl/private/server.key:ro - ./users.conf:/etc/strongswan/users.conf:ro environment: -- cgit v1.2.3