From 0a0607feb9f90e0514ea9c79c829c2a957aab82d Mon Sep 17 00:00:00 2001
From: hwdsl2 <hwdsl2@users.noreply.github.com>
Date: Sun, 17 May 2020 18:09:40 -0500
Subject: [PATCH] Update IKEv2 script

- Save client configuration to home folder
---
 extras/ikev2setup.sh | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

diff --git a/extras/ikev2setup.sh b/extras/ikev2setup.sh
index e8ca581..365c24a 100644
--- a/extras/ikev2setup.sh
+++ b/extras/ikev2setup.sh
@@ -293,7 +293,7 @@ certutil -z <(head -c 1024 /dev/urandom) \
 
 bigecho "Exporting CA certificate..."
 
-certutil -L -d sql:/etc/ipsec.d -n "IKEv2 VPN CA" -a -o "vpnca-$SYS_DT.cer"
+certutil -L -d sql:/etc/ipsec.d -n "IKEv2 VPN CA" -a -o ~/"vpnca-$SYS_DT.cer"
 
 bigecho "Exporting .p12 file..."
 
@@ -304,7 +304,7 @@ When importing into an iOS or macOS device, this password cannot be empty.
 
 EOF
 
-pk12util -o "vpnclient-$SYS_DT.p12" -n "vpnclient" -d sql:/etc/ipsec.d
+pk12util -d sql:/etc/ipsec.d -n "vpnclient" -o ~/"vpnclient-$SYS_DT.p12"
 
 bigecho "Restarting IPsec service..."
 
@@ -313,19 +313,23 @@ service ipsec restart
 
 cat <<EOF
 
-=================================================
+=======================================================
 
 IKEv2 VPN setup is now complete!
 
-Files exported to the current folder:
+Client configuration is available at:
 
-vpnclient-$SYS_DT.p12
-vpnca-$SYS_DT.cer (for iOS clients)
+EOF
+
+printf '%s\n' ~/"vpnclient-$SYS_DT.p12"
+printf '%s\n' ~/"vpnca-$SYS_DT.cer (for iOS clients)"
+
+cat <<EOF
 
 Next steps: Configure IKEv2 VPN clients. See:
 https://git.io/ikev2clients
 
-=================================================
+=======================================================
 
 EOF