I met this issue too. I have to change my cipher suite to
aes128-sha-1-modp1024 to connect IOS devices.

On Tuesday, October 27, 2015, Tobias Brunner <tob...@strongswan.org> wrote:

> Hi Harald,
>
> > If I got you correctly I would have to move back to DH2, just to make
> > the iphone users happy.
>
> Correct, or you use a configuration profile with DiffieHellmanGroup set
> to one of the other groups Apple claims to support (I don't know which
> of them actually work, though): 2 (Default), 5, 14, 15, 16, 17, or 18.
>
> > Do you know of any commitments from Apple to fix this?
>
> No idea.  I wasn't the one adding that information to the wiki.  But you
> could report the bug to Apple to get a rough idea when it is fixed.  In
> this case they will close your bug report and mark it as duplicate and
> you won't get any direct status updates etc. but you can see whether the
> original ticket is still open or not.
>
> Regards,
> Tobias
>
> _______________________________________________
> Users mailing list
> Users@lists.strongswan.org <javascript:;>
> https://lists.strongswan.org/mailman/listinfo/users
>
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to