Is there some configuration on the Mikrotik that prevents untrusted intermediate certificates from being used? This is not anything a Mikrotik configuration could affect. It is some trouble with the way how NordVPN has created their certificate chain (at least the log from Strongswan seems to confi...

this might be related to ROS7.5

2022-09-09_12-17-47.jpg

Interesting. Are you using NordVPN? Did you load any certificates other than the Root CA certificate?

It seems this might actually be a bug in RouterOS 7.5 - viewtopic.php?p=956185#p956015

Hy everyone! I have a problem with Router OS 7.5 on my LTAP mini (RB912r-2ND-ltn). My Ipsec connection dose not work while I upgrade on 7.4.1 to 7.5 OS. The firmware type is qca9531L, current firmware is 7.5. Anybody knows what a problem is? I see my log where I find that massage ipsec,error unable...

I've had a look at the strongSwan logs on my Android device (where it connects successfully). It seems to use an untrusted intermediate certificate for "CN=NordVPN CA7": [IKE] received end entity cert "CN=us 8656.nordvpn.com" [IKE] received issuer cert "C=PA, 0=NordVPN, CN=N...

Hi, I have followed this tutorial without success: https://wiki.mikrotik.com/wiki/IKEv2_EAP_between_NordVPN_and_RouterOS As soon as I add the ipsec identity and it tries to connect to the NordVPN server, I get the following in the log: new ike2 SA (I): NordVPN 197.123.75.147[4500]-185.234.243.27[450...