Hello, Is there a way to get to the peer's certificate from an ike_sa_t pointer for an eap-tls connection. I have a connection from a windows machine to strongswan using eap-tls, but when I try to get the cert from an enumeration of auth_cfg_t from the ike_sa, I do not see any rule that has the cert. The same thing works well the windows connects using machine cert without eap. I need the cert when the updown script is called in order to get some fields from the cert. I am using strongswan 5.1.3 + patches.
regards, sk
