[strongSwan] Android VPN Client - Constraint check failed: identity required

[Mark M]

Tobias,

Thanks for the info. Is this set for the android client only because I have never set the subjectAltname field for any of my certificates before, I only have this problem with the android client.



------------------------------
On Sun, Sep 23, 2012 2:01 AM EDT Tobias Brunner wrote:

>Hi Mark,
>
>> I am trying to use the strongSwan VPN client to connect to my strongSwan
>> gateway and the connection fails with "constraint check failed: identity
>> "ip address of my gateway" required. then it says the selected pair
>> config is inapplicable.
>> 
>> What could be causing this?
>
>The configured hostname (in your case the IP address) has to be
>contained as subjectAltName in the gateway's certificate.  That's to
>prevent man-in-the-middle attacks.
>
>Regards,
>Tobias