Re: OS X 10.11 'El Capitan' IKEv2

2015-10-15 Thread matthew j weaver
> On 2015-10-03, at 0040h, matthew j weaver wrote: > > I’ve not yet surfaced where the ikev2 proposal/policy configs hide in OS X. For anyone still playing the home game: You’ll find the proposal configs for both phases of your VPN interface hiding in

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-07 Thread matthew j weaver
> On Oct 3, 2015, at 5:32 AM, Reyk Floeter wrote: > In summary, the GUI part is very easy but certificate configuration is > a bit difficult. It's the same complexity as in Windows. But much > better compared to earlier IPsec configurations. Agreed, thanks for the update. I

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Or Elimelech
Thanks, verified and works great! > On 3 Oct 2015, at 3:32 PM, Reyk Floeter wrote: > > On Sun, Aug 16, 2015 at 11:28:24PM +0300, Or Elimelech wrote: >> Hello misc, >> >> Has anyone connected successfully between the new OS X ikev2 impl. To an >> OpenBSD box? >> >> Thanks in

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Rob
Search for a utility on the App Store, by Apple called: Apple Configurator. This lets you generate a profile that allows you to set more of the VPN configuration than is available via the Network preference utility. It says IKEv2 is only for IOS, but it successfully installs on OSX. I’ve

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Ted Unangst
Rob wrote: > Search for a utility on the App Store, by Apple called: Apple Configurator. does it run on openbsd..?

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Reyk Floeter
On Sun, Aug 16, 2015 at 11:28:24PM +0300, Or Elimelech wrote: > Hello misc, > > Has anyone connected successfully between the new OS X ikev2 impl. To an > OpenBSD box? > > Thanks in advance. > I got the official update and I successfully connected from El Capitan to OSX. I did it without

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread Rob
Not unless Apple have release the App Store for OpenBSD ;-). Try the following links: https://wiki.strongswan.org/projects/strongswan/wiki/AppleIKEv2Profile & https://developer.apple.com/library/ios/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html. That should be

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-03 Thread bofh
Ugh. I'm feeling really stupid. I can't get any vpn set up between my openbsd box and my OS X system, whether ike or npppd. First - do I have to run -current, or will 5.7 work for this? On OpenBSD virtual machine: em0: 10.211.55.5 ---/etc/rc.conf.local--- ipsec=YES iked_flags="-v"

Re: OS X 10.11 'El Capitan' IKEv2

2015-10-02 Thread matthew j weaver
> On Aug 17, 2015, at 5:39 AM, Reyk Floeter wrote: > > On Sun, Aug 16, 2015 at 11:28:24PM +0300, Or Elimelech wrote: >> Hello misc, >> >> Has anyone connected successfully between the new OS X ikev2 impl. >> To an OpenBSD box? >> > > No, we don't have the beta. > > Reyk

Re: OS X 10.11 'El Capitan' IKEv2

2015-08-17 Thread Reyk Floeter
On Sun, Aug 16, 2015 at 11:28:24PM +0300, Or Elimelech wrote: Hello misc, Has anyone connected successfully between the new OS X ikev2 impl. To an OpenBSD box? No, we don't have the beta. Reyk

Re: OS X 10.11 'El Capitan' IKEv2

2015-08-17 Thread Or Elimelech
Thanks Reyk, BTW thumbs up for your awesome work. On 17 Aug 2015, at 12:39 PM, Reyk Floeter r...@openbsd.org wrote: On Sun, Aug 16, 2015 at 11:28:24PM +0300, Or Elimelech wrote: Hello misc, Has anyone connected successfully between the new OS X ikev2 impl. To an OpenBSD box? No, we

OS X 10.11 'El Capitan' IKEv2

2015-08-16 Thread Or Elimelech
Hello misc, Has anyone connected successfully between the new OS X ikev2 impl. To an OpenBSD box? Thanks in advance.