On Sat, 22 Apr 2017, Daniel McCarney wrote:

The requests that fail are given a server certificate[2] with the serial

Notably this does *not* include DNS:download.libreswan.org which is what causes requests that get this certificate to fail with a hostname mismatch.

Thanks for the debugging on that! We will add the SAN entry to the
Finnish instance :)

Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to