[strongSwan] "ikeIntermediate" flag in the server certificate

Gilles Printemps gprintemps at gmail.com
Thu Nov 30 15:38:23 CET 2017


Hi,
Is the "ikeIntermediate" flag really mandatory in the server certificate?
In the wiki, it is mentioned the following:
To support versions before 10.7.4 the certificate must contain the
*iKEIntermediate* extended key usage flag.

Can you confirm there is no issue for recent version if this flag is not
available?
FYI, my SSL certificate provider told me it was not possible to get this
flag in their certificate...

Best Regards,
Gilles
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171130/f255b9e4/attachment.html>


More information about the Users mailing list