[strongSwan] Android identity

Vukovics Mihaly vm at informatik.hu
Tue Sep 20 16:22:54 CEST 2016


Hello Tobias,

you were right, the issue is:

"id 'partial at informatik.hu' not confirmed by certificate, defaulting to 
'C=HU, O=Informatik.hu, CN=informatik.hu'"

So I guess need to put altName in the cert if I want to use same cert 
for multiple peers configs.

Üdvözlettel:
Vukovics Mihály
Informatik.hu Kft.

On 2016.09.20. 14:09, Tobias Brunner wrote:
> Hi Mihaly,
>
>> But anyway I setp up left/rightid on the server side, I always get "no
>> matching peer config found".
>>
>> How is Android "Server identity" matched on server side?
> Exactly as you'd suspect I guess, it's matched against the local
> identity on the server (presumably leftid).  Check the log for details
> ("looking for peer configs matching...", optionally increase the log
> level for the cfg subsystem for more details).
>
> Regards,
> Tobias
>



More information about the Users mailing list