Actions
Bug #6684
closedSetting IKEv2 Phase 2 in Mobile Config appears to generate invalid Apple Profile
Start date:
08/07/2016
Due date:
% Done:
0%
Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
Affected Architecture:
Description
Setting "Phase2 PFS Group - Provide the Phase2 PFS group to clients (overrides all mobile phase2 settings)" in Mobile Clients settings on at least IKEv2 appears to generate an invalid mobileconfig profile using the Apple IPsec Profile factory package (ipsec-profile-exporter).
Culprit is probably:
<key>DiffieHellmanGroup</key>
<integer></integer>
in the child SA config.
Workaround: disable in Mobile Clients config and enable DH group in Phase 2.
Actions