Jump to content

This is the support site for Andrews & Arnold Ltd, a UK Internet provider. Information on these pages is generally for our customers but may be useful to others, enjoy!

FireBrick Road Warrior strongSwan: Difference between revisions

Content deleted Content added
Reedy (talk | contribs)
CA Certificate: formatting
AA-Andrew (talk | contribs)
 
Line 16: Line 16:
==CA Certificate==
==CA Certificate==


Usually you can use ACME and Letsencrypt to assign a certificate to the FireBrick, so skip the next step if you're doing this.
Download your CA certificate from the FireBrick, and copy to <tt>/etc/ipsec.d/cacerts/</tt> on your client box. Strongswan shouldn't mind if PEM or DER.

If using a manually creates certificate, Download your CA certificate from the FireBrick, and copy to <tt>/etc/ipsec.d/cacerts/</tt> on your client box. Strongswan shouldn't mind if PEM or DER.


If you're using a Let's Encrypt cert on the FireBrick (which is easy) - you'll need to symlink the system CA:
If you're using a Let's Encrypt cert on the FireBrick (which is easy) - you'll need to symlink the system CA: