我用的是IKEv2的协议，用的共享密匙的方法，就是最后安装配置文件的之后会打印“error in __connection_block_invoke_2: Connection interrupted”，求大神搭救！

self.vpnManager = [NEVPNManager sharedManager]; [_vpnManager loadFromPreferencesWithCompletionHandler:^(NSError * _Nullable error) { if (error) { NSLog(@"Load config failed [%@]", error.localizedDescription); return ; } // config IPSec protocol NEVPNProtocolIKEv2 *p = _vpnManager.protocol; if (p) { }else{ p = [[NEVPNProtocolIKEv2 alloc]init]; } p.username = @"qlvpn"; p.serverAddress = @"服务器地址"; // get password persistent reference from keychain p.passwordReference = [self searchKeychainCopyMatching:@"kd2014@"]; // If password doesn't exist in keychain, should create it beforehand. if (!p.passwordReference) { [self createKeychainValue:@"kd2014@" forIdentifier:@"kd2014@"]; p.passwordReference = [self searchKeychainCopyMatching:@"kd2014@"]; } p.authenticationMethod = NEVPNIKEAuthenticationMethodSharedSecret; p.sharedSecretReference = [self searchKeychainCopyMatching:@"PSK"]; if (!p.sharedSecretReference) { [self createKeychainValue:@"qlvpn_kd2014@" forIdentifier:@"PSK"]; p.sharedSecretReference = [self searchKeychainCopyMatching:@"PSK"]; } // p.serverCertificateIssuerCommonName //倒入p12证书 // p.identityData = [NSData dataWithContentsOfFile:[[NSBundle mainBundle] pathForResource:@"client.cert" ofType:@"p12"]]; //倒入p12密码 // p.identityDataPassword = @"kd2014@"; p.localIdentifier = @"qlvpn.client"; p.remoteIdentifier = @"qlvpn.server"; p.useExtendedAuthentication = YES; p.disconnectOnSleep = NO; // [_vpnManager setOnDemandEnabled:p]; //z和 _vpnManager.localizedDescription = @"IKEv2 Demo"; _vpnManager.protocol = p; [_vpnManager saveToPreferencesWithCompletionHandler:^(NSError * _Nullable error) { NSLog(@"Save config faild[%@]",error.localizedDescription); }]; }];

下面是存密匙的方法：

static NSString * const serviceName = @"qlvpn.vpn_config";

• (NSMutableDictionary)newSearchDictionary:(NSString)identifier {

  NSMutableDictionary *searchDictionary = [[NSMutableDictionary alloc] init]; [searchDictionary setObject:(__bridge id)kSecClassGenericPassword forKey:(__bridge id)kSecClass]; NSData *encodedIdentifier = [identifier dataUsingEncoding:NSUTF8StringEncoding]; [searchDictionary setObject:encodedIdentifier forKey:(__bridge id)kSecAttrGeneric]; [searchDictionary setObject:encodedIdentifier forKey:(__bridge id)kSecAttrAccount]; [searchDictionary setObject:serviceName forKey:(__bridge id)kSecAttrService]; return searchDictionary;

  }

• (NSData)searchKeychainCopyMatching:(NSString)identifier {

  NSMutableDictionary *searchDictionary = [self newSearchDictionary:identifier]; // Add search attributes [searchDictionary setObject:(__bridge id)kSecMatchLimitOne forKey:(__bridge id)kSecMatchLimit]; // Add search return types // Must be persistent ref !!!! [searchDictionary setObject:@YES forKey:(__bridge id)kSecReturnPersistentRef]; CFTypeRef result = NULL; SecItemCopyMatching((__bridge CFDictionaryRef)searchDictionary, &result); return (__bridge_transfer NSData *)result;

  }

• (BOOL)createKeychainValue:(NSString)password forIdentifier:(NSString)identifier {

  NSMutableDictionary *dictionary = [self newSearchDictionary:identifier]; OSStatus status = SecItemDelete((__bridge CFDictionaryRef)dictionary); NSData *passwordData = [password dataUsingEncoding:NSUTF8StringEncoding]; [dictionary setObject:passwordData forKey:(__bridge id)kSecValueData]; status = SecItemAdd((__bridge CFDictionaryRef)dictionary, NULL); if (status == errSecSuccess) { return YES; } return NO;

  }

最后总是返回error in __connection_block_invoke_2: Connection interrupted。。。感觉整个人都不对了。。。