Re: [Openvpn-users] OpenVPNConnect: Support of IOS Keychain

[Gert D. <ge...@gr...>]

Hi,

On Mon, Feb 03, 2025 at 12:16:12PM +0100, Ralf Hildebrandt via Openvpn-users wrote:
> We have the requirement to make the key & cert used within an openvpn
> connection profile not exportable.
> 
> So we thought it would be a sensible approach to install key & cert
> into the IOS Keychain, but currently I'm unsure if openvpnConnect
> (3.5.1) can actually use them.
> 
> The documentation seems to suggest that exporting from the keychain an
> dimporting into openvpnConnect (and later referencing the imported
> key/cert)
> 
> Is that approach supported at all?

Unfortunately, there doesn't seem to be anyone from the Connect team
here (or in my reach).  So I have no answer from you - in theory, that
is the approach to use, "import Cert into secure element, reference from
there" (Windows keyapi, iOS keystore, ...).

Maybe opening a Connect ticket via https://support.openvpn.net/ might
get useful responses.

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             ge...@gr...