[strongSwan] IKEv2 and MacOS roadwarrior

[korsar182 at gmail.com]

I re-created server certificate using  
--subject-alt-name="IP:123.123.123.123" and now MacOS clients connect well.
Thank you, Tobias!

Tobias Brunner <tobias at strongswan.org> писал(а) в своём письме Tue, 14 Jan  
2020 17:50:34 +0200:

> Hi,
>
>> How I can change leftid for strongswan? It always CN=123.123.123.123 no
>> matter what I configure in ipsec.conf, even leftid=%any doesn't work.
>
> You need to include that IP address (or alternatively a hostname) as
> subjectAltName extension in the certificate.
>
> Regards,
> Tobias