[strongSwan] how to use 'rightca' connection option?

[John Brown]

Hi Tobias,
 I didn't notice this warning but I'm going to test not only this scenario
but also others, hoping that with your hints, I'll manage to set this up.
Thank you for your help!

Regards,
John

2016-11-25 14:37 GMT+01:00 Tobias Brunner <tobias at strongswan.org>:

> Hi John,
>
> > Did you mean that when using rightca, I should have locally installed
> > the certificate with DN the same as provided for rightca option
> > otherwise the option is igmored?
>
> Yep.  You should actually see a warning in the log, saying something
> like "CA certificate "..." not found, discarding CA constraint".
>
> Regards,
> Tobias
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161125/50aefa5c/attachment.html>