[strongSwan] Android VPN Client - Constraint check failed: identity required

Tobias Brunner tobias at strongswan.org
Sun Sep 23 08:01:08 CEST 2012

Hi Mark,

> I am trying to use the strongSwan VPN client to connect to my strongSwan
> gateway and the connection fails with "constraint check failed: identity
> "ip address of my gateway" required. then it says the selected pair
> config is inapplicable.
> What could be causing this?

The configured hostname (in your case the IP address) has to be
contained as subjectAltName in the gateway's certificate.  That's to
prevent man-in-the-middle attacks.


More information about the Users mailing list