Just getting my mac to connect to an Azure IKEv2 VPN P2S connection using certs generated by EasyRSA
Assuming you have already init’d and created your ca.crt using EasyRSA. See my previous post regarding this.
ca.crt to copy into the the Root Certificate field. This basically outputs the cert in base64 without any line ends. (it’s a long string instead of a block). Not sure if this is a big deal as I think the portal strips the new lines..
openssl x509 -in ca.crt -outform der | base64
Add the ca.crt to the portal as the Root Certificate
Build some client certs. The export-p12 command bundles the clients private key and public cert together for import into
./easyrsa build-client-full client3 # enter passphrase and make note for client ./easyrsa export-p12 client3 Note: using Easy-RSA configuration from: ./vars Using SSL: /usr/local/Cellaremail@example.com/1.1.1c/bin/openssl OpenSSL 1.1.1c 28 May 2019 Enter pass phrase for /Users/jmcd/Downloads/easy-rsa/EasyRSA-v3.0.6/pki/private/client3.key: Enter Export Password: Verifying - Enter Export Password: Successful export of p12 file. Your exported file is at the following location: /Users/jmcd/Downloads/easy-rsa/EasyRSA-v3.0.6/pki/private/client3.p12
Open the location of you EasyRSA folder and open the pki folder and view the folder structure. Note the ca.crt file and the client3.p12 file in private