OpenVPNAdapter with SecIdentity

[aevtyushin]

Is it possible to use OpenVPNAdapter with SecIdentity?

We are currently using the following approach:

• Get the .pfx file from the server;
• Using openSSL, gets a privateKey and a cert (save them in the Keychain);
• Add them to OpenVPNConfiguration when connected:
  let configuration = OpenVPNConfiguration() configuration.settings = [ "cert": cert, "key": key ]

We would like to change the situation:

• Generate privateKey in Secure Enclave on the device;
• Create a CSR file and send it to the server;
• Get the cert (and save it in the Keychain);
• When connecting a VPN, we use SecIdentity (which contains a link to the private key and certificate).

Is it possible?

In the description of openvpn3 I found the following:

But I still haven't figured out how to use it.
Do you have examples?

[ss-abramchuk]

Hi @aevtyushin,

Alas, but I can't give you exact answer. Probably, with external PKI it is possible but I didn't have a chance to check it. And currently, OpenVPNAdapter doesn't expose this feature, so it will require some work at first.