Skip to content
This repository has been archived by the owner on Jun 4, 2021. It is now read-only.

Fix "No valid certificates available for authentication" error for iOS OpenConnect #1398

Merged
merged 2 commits into from Jul 13, 2018

Conversation

alimakki
Copy link
Collaborator

@alimakki alimakki commented Jul 7, 2018

  • .mobileconfig re-generated from Apple Configurator 2 (DeviceUniqueIdentifier key/value from VedorConfig and ProviderType packet-tunnel setting now removed)
  • uppercase UUIDs

Tested on DO instance successfully. Thanks @MRizkBV for the heads up.

Resolves #1396

@ammaristotle
Copy link

@alimakki I tested your fix on GCP, can confirm it's working.

@nopdotcom
Copy link
Member

LGTM!

Copy link
Member

@nopdotcom nopdotcom left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oops. LGTM in a review too!

@alimakki alimakki merged commit b2ff836 into StreisandEffect:master Jul 13, 2018
@alimakki alimakki deleted the ocserv_ios_fix branch July 13, 2018 18:37
@alimakki
Copy link
Collaborator Author

Thanks for the review @nopdotcom

@GauthierPLM
Copy link
Contributor

Will I need to redeploy my VPNs to fix this?
Is there anyway to update Streisand install without regenerating all the certificates?

@alimakki
Copy link
Collaborator Author

You should be able to edit the existing .mobileconfigs.

Try removing the following settings from the mobileconfig and re-importing them into your device:

<key>ProviderType</key>
<string>packet-tunnel</string>
<key>DeviceUniqueIdentifier</key>
<string>{DeviceUid}</string>

xiangwyao added a commit to xiangwyao/streisand that referenced this pull request Aug 12, 2018
* Make sure both gpg-agent and dirmngr have picked up new configuration (StreisandEffect#1387)

@hamidzr wrote StreisandEffect#1335, which fixes StreisandEffect#1333, a case of a running `gpg-agent` not picking up changes from GPG configuration. When testing, I noticed the configuration issue affects `dirmngr` as well. If there's a running `dirmngr`, provisioning fails when trying to update the keyring. This patch addresses both components.

`dirmngr` doesn't seem respond to HUP or `--reload`, so it needs to be killed and restarted.

Resolves StreisandEffect#1333.

* - mobileconfig re-generated from apple configurator 2 (StreisandEffect#1398)


    - .mobileconfig re-generated from Apple Configurator 2 (DeviceUniqueIdentifier key/value from VedorConfig and ProviderType packet-tunnel setting now removed)
    - uppercase UUIDs

* Remove "ec2:DescribeAlarms" from suggested IAM policy (StreisandEffect#1407)

"ec2:DescribeAlarms" doesn't exist.

* Updated Documentation for Ubuntu 16.04, 17.10, and 18.04 (StreisandEffect#1408)

There have been some issues with versions of Ubuntu. See Issue StreisandEffect#1296 for information about problems with 16.04. 16.10 and 17.04 are now end of life (see https://wiki.ubuntu.com/Releases). I have updated the documentation (minor changes) to reflect 16.04, 17.10, and 18.04, which are currently supported.

* Ensure VPN profile names fit in Linux network device names (StreisandEffect#1400)

There's a 15-character limit on the length of Linux network device names, and it would be nice to use the VPN profile names as interface names. A few of the wordlist words are 8 letters long. We can use two words as long as they're each 7 characters or shorter (leaving room for the separator).

* When checking syntax, don't search inside the venv directory (StreisandEffect#1395)

Now that we're telling people to use ./venv as a place to put virtualenvs, don't search there when we're checking syntax.

* Don't print long apt keys to the log (StreisandEffect#1412)

This is mostly for the 200-line Tor key, but the other (25-line) keys were hidden for consistency.

* Add WireGuard instructions for Android using the new QR code support. (StreisandEffect#1413)

* WireGuard instructions update (StreisandEffect#1417)

* Add WireGuard instructions for Android using the new QR code support.

* update wireguard fr instructions

* Update readme-fr (StreisandEffect#1419)

* Update OpenVPN instuctions (StreisandEffect#1420)

- update fr instructions to reflect changes made in StreisandEffect#1408
- correct instructions to mention LZ4 compression instead of LZO

* Fix stunnel windows mirror download location (StreisandEffect#1425)
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants