[GH-ISSUE #449] Can psk mode ikev2 connections be supported #420

Closed
opened 2026-03-02 08:18:49 +03:00 by kerem · 1 comment
Owner

Originally created by @HX-Technology-LLC on GitHub (Oct 17, 2024).
Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/449

Checklist

Describe the enhancement request
A clear and concise description of your enhancement request.

Support the psk mode in ikev2 connections

Is your enhancement request related to a problem? Please describe.
(If applicable) A clear and concise description of what the problem is.

The current ikev2 connection based on machine certificates is a bit complicated, especially when importing certificates and replacing them. If you use psk you can simply change the key .

Additional context
Add any other context about the enhancement request here.

If this is not directly supported, can I manually modify the libreswan config file to enable this functionality.

Originally created by @HX-Technology-LLC on GitHub (Oct 17, 2024). Original GitHub issue: https://github.com/hwdsl2/docker-ipsec-vpn-server/issues/449 **Checklist** - [ ] I searched existing [Issues](https://github.com/hwdsl2/docker-ipsec-vpn-server/issues?q=is%3Aissue), and did not find a similar enhancement request - [ ] This enhancement request is about the IPsec VPN server Docker image, and not IPsec VPN itself - [ ] I read the [README](https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/README.md) - [ ] I read the [Important notes](https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/README.md#important-notes) - [ ] I followed instructions to [configure VPN clients](https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/README.md#next-steps) - [ ] I checked [IKEv1 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#ikev1-troubleshooting), [IKEv2 troubleshooting](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/ikev2-howto.md#ikev2-troubleshooting), [enabled logs](https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/docs/advanced-usage.md#enable-libreswan-logs) and checked [VPN status](https://github.com/hwdsl2/setup-ipsec-vpn/blob/master/docs/clients.md#check-logs-and-vpn-status) **Describe the enhancement request** A clear and concise description of your enhancement request. Support the psk mode in ikev2 connections **Is your enhancement request related to a problem? Please describe.** (If applicable) A clear and concise description of what the problem is. The current ikev2 connection based on machine certificates is a bit complicated, especially when importing certificates and replacing them. If you use psk you can simply change the key . **Additional context** Add any other context about the enhancement request here. If this is not directly supported, can I manually modify the libreswan config file to enable this functionality.
kerem closed this issue 2026-03-02 08:18:50 +03:00
Author
Owner

@hwdsl2 commented on GitHub (Oct 17, 2024):

@HX-Technology-LLC Hello! IKEv2 mode with PSK is not currently supported in this project. If you want to explore that functionality yourself, you can learn more about IPsec configuration at:
https://libreswan.org/man/ipsec.conf.5.html
https://libreswan.org/wiki/Configuration_examples

To make changes to the VPN configuration, you can open a Bash shell inside the container, then edit /etc/ipsec.d/ikev2.conf. When finished, exit the container and restart the Docker container.

<!-- gh-comment-id:2420840383 --> @hwdsl2 commented on GitHub (Oct 17, 2024): @HX-Technology-LLC Hello! IKEv2 mode with PSK is not currently supported in this project. If you want to explore that functionality yourself, you can learn more about IPsec configuration at: https://libreswan.org/man/ipsec.conf.5.html https://libreswan.org/wiki/Configuration_examples To make changes to the VPN configuration, you can [open a Bash shell inside the container](https://github.com/hwdsl2/docker-ipsec-vpn-server/blob/master/docs/advanced-usage.md#bash-shell-inside-container), then edit `/etc/ipsec.d/ikev2.conf`. When finished, exit the container and restart the Docker container.
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/docker-ipsec-vpn-server#420
No description provided.