[strongSwan] Android VPN Client - Constraint check failed: identity required

[Tobias Brunner]

Hi Mark,

> I am trying to use the strongSwan VPN client to connect to my strongSwan
> gateway and the connection fails with "constraint check failed: identity
> "ip address of my gateway" required. then it says the selected pair
> config is inapplicable.
> 
> What could be causing this?

The configured hostname (in your case the IP address) has to be
contained as subjectAltName in the gateway's certificate.  That's to
prevent man-in-the-middle attacks.

Regards,
Tobias