From 6e07f6331774b4bdae55c21dcc4deec0aeab7463 Mon Sep 17 00:00:00 2001 From: Sebastian Oliva Date: Tue, 4 Jul 2017 14:14:07 -0600 Subject: [PATCH] Setting truncbug to on makes it fail on Android 7.1 --- docs/clients.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/docs/clients.md b/docs/clients.md index 657ed2e..344ff22 100644 --- a/docs/clients.md +++ b/docs/clients.md @@ -400,8 +400,7 @@ If you are unable to connect using Android 6 (Marshmallow) or 7 (Nougat): 1. Tap the "Settings" icon next to your VPN profile. Select "Show advanced options" and scroll down to the bottom. If the option "Backward compatible mode" exists, enable it and reconnect the VPN. If not, try the next step. 1. **Note:** The latest version of VPN scripts already includes this change. - (For Android 7.1.2 and newer) Edit `/etc/ipsec.conf` on the VPN server. Append `,aes256-sha2_512` to the end of both `ike=` and `phase2alg=` lines. Save the file and run `service ipsec restart`. (Ref) -1. Edit `/etc/ipsec.conf` on the VPN server. Find `sha2-truncbug=yes` and replace it with `sha2-truncbug=no`, indented with two spaces. Save the file and run `service ipsec restart`. (Ref) + (For Android 7.1.2 and newer) Edit `/etc/ipsec.conf` on the VPN server. Append `,aes256-sha2_512` to the end of both `ike=` and `phase2alg=` lines. Save the file and run `service ipsec restart`. (Ref) (Ref) ![Android VPN workaround](images/vpn-profile-Android.png)