3 ms·
Has anyone ever gotten strongSwan clients (or IPSec VPNs in general) working on not-Ubuntu? It's poorly documented and pretty shit in general, it was a huge hea
by Sir_Cmpwn 9y ago
Has anyone ever gotten strongSwan clients (or IPSec VPNs in general) working on not-Ubuntu? It's poorly documented and pretty shit in general, it was a huge headache and I gave up on algo after several hours of trying to get it working.
- jaimex2 9y agoyeah, a lot of work for little payoff. l2tp makes authentication palatable.
- dguido 9y agoHi, author here. Yes! IPSEC works great in most of the major client platforms. All the information to set them up is documented in the Algo readme: https://github.com/trailofbits/algo#configure-the-vpn-clients https://github.com/trailofbits/algo#configure-the-vpn-client...
- Sir_Cmpwn 9y ago>These will require customization based on your exact use case. This was my issue. They didn't just werk and the relevant docs are _awful_ (though not your fault).
- dguido 9y agoWhat platform? We test on every current major client platform (macOS 10.12, Windows 10, Ubuntu 17.04, iOS 10, Android 7, etc.)
- Sir_Cmpwn 9y agoArch Linux.
- dguido 9y agoThe Ubuntu instructions will work fine! We have many Arch users. You need to check the Y box for "Linux Network Manager support" during install. Make sure you're using a current version of Arch.
- Sir_Cmpwn 9y agoNetwork Manager as in the dbus driven sack of crap whose VPNs can only be configured through an Xembed GUI? I don't want to use that. I want to write a config in /etc and enable a unit and never think about it again.
- dguido 9y agohahah same! Then you can use these instructions then: https://github.com/trailofbits/algo#ubuntu-server-1604-example https://github.com/trailofbits/algo#ubuntu-server-1604-examp...
- ktta 9y agoYou might want to specify that you are the author of algo, otherwise people might assume you are the author of the article.