[strongSwan] Android VPN Client - Constraint check failed: identity required

Mark M mark076h at yahoo.com
Mon Sep 24 02:28:03 CEST 2012


Thanks for the info. Is this set for the android client only because I have never set the subjectAltname field for any of my certificates before, I only have this problem with the android client.

On Sun, Sep 23, 2012 2:01 AM EDT Tobias Brunner wrote:

>Hi Mark,
>> I am trying to use the strongSwan VPN client to connect to my strongSwan
>> gateway and the connection fails with "constraint check failed: identity
>> "ip address of my gateway" required. then it says the selected pair
>> config is inapplicable.
>> What could be causing this?
>The configured hostname (in your case the IP address) has to be
>contained as subjectAltName in the gateway's certificate.  That's to
>prevent man-in-the-middle attacks.

More information about the Users mailing list