[strongSwan-dev] Stroke vs VICI: defaulting to certificate subject for ID

Jean-Francois HREN jean-francois.hren at stormshield.eu
Tue Sep 1 15:32:52 CEST 2020


Hello, 

When a configuration is sent to Charon via Stroke and an id is not confirmed by the associated certificate subject, the id is defaulting to the certificate subject. 
This behavior is not present when a configuration is sent to Charon via VICI. 
Is it voluntary or a missing check ? 

Thank you, 
Jean-François Hren 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20200901/0e570346/attachment.html>


More information about the Dev mailing list