Re: OpenVPNConnect: Support of IOS Keychain
Gert Doering <[email protected]> Wed, 5 Feb 2025 14:07:00 +0100
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
Hi,
On Mon, Feb 03, 2025 at 12:16:12PM +0100, Ralf Hildebrandt via Openvpn-users wrote:
> We have the requirement to make the key & cert used within an openvpn
> connection profile not exportable.
>
> So we thought it would be a sensible approach to install key & cert
> into the IOS Keychain, but currently I'm unsure if openvpnConnect
> (3.5.1) can actually use them.
>
> The documentation seems to suggest that exporting from the keychain an
> dimporting into openvpnConnect (and later referencing the imported
> key/cert)
>
> Is that approach supported at all?
Unfortunately, there doesn't seem to be anyone from the Connect team
here (or in my reach). So I have no answer from you - in theory, that
is the approach to use, "import Cert into secure element, reference from
there" (Windows keyapi, iOS keystore, ...).
Maybe opening a Connect ticket via https://support.openvpn.net/ might
get useful responses.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany [email protected]
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
(application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE----- iQGcBAEBAgAGBQJno2J0AAoJEB2Cnv7KVigS8y0MAK9xqyH0WzevJoMkudNqg/9i fD15HQU3n4oSja2VAnE7Vd0dLJkJz1isSf8D1xZKaWe3VdRdFbxPap8ln8zdrMsX gSAmVq0eLeN2LsKTpy9v3IGzULJO5g+1T3kvGnDWxgTM6BID2bYR2xQ4UNhMVuMD r3FNqCHvc/Rg4JmNsb9Igggk2aB0+FcEoj0EHNDiZUD8OBTE9UWUicMbF1ubYPVT b2kVArOoGVNXhKhvQUouP1/SAAE+mdnBTqiv/qiRV+uTO4mkAgCJQH0dQE++SHeh TLovPk+zgPa3+07YeUh8s+FyQQTdQIfoosLFczihi3aEqWCojVSKIytqeWdlu0Bz ErAG+pVmIoTiH0llQiUu+m2DZZb2mjpdkHMd0VMMwvtevGych8LPBqFilC5vVXET g6e3k3glDtUA82kq2b1fkJBHtbbOaZHQYSW4Jjr6DQlDGmHj6mwMpxtzAZmAyXse ydfexI8FtVkJKru0QjXCgfySbCPnILni+XTCPh48oQ== =FHWI -----END PGP SIGNATURE-----