Hi Martin,
Am Donnerstag, 7. Mai 2009 14:09:04 schrieb Martin Willi:
> > - checks for Extended Key Usage Flags
> > - requires the DNS name entered as Gateway address to be included in
> >   the DN or as subjectAltName

> [1]http://wiki.strongswan.org/wiki/strongswan/Win7CertReq

The DNS name of the Gateway was already included in our Gateway certificate. 
I extended our Gateway certificate with the following flag: 

[req_ext]
..
extendedKeyUsage = serverAuth
..

Windows 7 RC Agile vpn-client  is now working again without to disable
the extended certificate checks.

Thanks!
peter
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to