Next, securely transfer the generated .p12 file from the repository to your Linux computer.
that, extract the CA certificate, client certificate and private key. Replace vpnclient.p12
example below with the name of your .p12 file.
# Example: Extract CA certificate, client certificate and private key.
# You may delete the .p12 file when finished.
# Note: You may need to enter the import password, which can be found
# in the output of the IKEv2 helper script. If the output does not
# contain an import password, press Enter to continue.
openssl pkcs12 -in vpnclient.p12 -cacerts -nokeys -out ikev2vpnca.cer
openssl pkcs12 -in vpnclient.p12 -clcerts -nokeys -out vpnclient.cer
openssl pkcs12 -in vpnclient.p12 -nocerts -nodes -out vpnclient.key
# (Important) Protect certificate and private key files
# Note: This step is optional, but strongly recommended.
sudo chown root.root ikev2vpnca.cer vpnclient.cer vpnclient.key
sudo chmod 600 ikev2vpnca.cer vpnclient.cer vpnclient.key
Go to Settings -> Network -> VPN. Click the + button.
Select IPsec/IKEv2 (strongswan).
Enter anything you like in the Name field.
In the Gateway (Server) section, enter Your VPN Server IP (or DNS name) for
the Address. / you can find it
Select the ikev2vpnca.cer file for the Certificate.
In the Client section, select
Certificate(/private key) in the Authentication drop-down menu.
Select Certificate/private key in the
Certificate drop-down menu (if exists).
Select the vpnclient.cer file for the
Select the vpnclient.key file for the
In the Options section, check the
Request an inner IP address checkbox.
In the Cipher proposals (Algorithms) section, check the
Enable custom proposals checkbox.
Leave the IKE field blank .
Enter aes128gcm16 in the ESP field.
Click Add to save the VPN connection information.
Turn the VPN switch ON.
In order to install applications, you need to activate developer mode on Oculus
(see activation guide here).
After this step you can install third-party applications (i.e. sideloading). Then you need to
to your device (the process of installation is the same as on Android).
This can be done via internal browser or by using adb. Download the file to your PC, then
push it to the device:
adb push vpnclient.sswan /sdcard/
The next step is strong swan installation. Download apk from here and install it with the next
command: adb install -g -r strongSwan-2.3.3.apk
Unfortunately, the built-in file manager is quite truncated, so when you click on import vpn
profile nothing will happen (that’s why strong swan is installed via adb). Therefore, a
couple of additional steps need to be taken.
Download any decent file manager (I personally use Mixplorer) and install it with
adb install -g -r mixplorer.apk
Put on your VR headset and repeat the remaining steps as when installing on android.
Now when you click on import VPN profile Mixplorer will be used to navigate and select a