Project

General

Profile

BlackBerry OS 10 » History » Version 8

Noel Kuntze, 20.01.2017 20:45
Get rid of bad example config

1 2 ValdikSS ValdikSS
h1. BlackBerry OS 10
2 2 ValdikSS ValdikSS
3 7 ValdikSS ValdikSS
Blackberry 10 supports Cisco IKEv1 with XAUTH-PSK and XAUTH-PKI and IKEv2 with PSK, PKI, EAP-TLS and EAP-MSCHAPv2 authentication. You should choose "Generic IKEv2 VPN Server" as a gateway type for IKEv2. IPv6 is not supported.
4 6 ValdikSS ValdikSS
Both server and client could be authenticated by IPv4 address, FQDN, Email in certificate, General or Distinguished name.
5 3 ValdikSS ValdikSS
6 5 Noel Kuntze
For BlackBerry OS 10 to accept a server certificate, it has to contain the serverAuth flag in the EKU (Extended Key Usage) field.
7 5 Noel Kuntze
A client certificate needs to have clientAuth set in the EKU field.
8 5 Noel Kuntze
9 8 Noel Kuntze
The @ikev2-eap-mschapv2@ configuration from [[SaneExamples|the sane examples page]] is compatible with Blackberry OS.