Thank you for the inputs Martin, I tried adding * BUILD_SUBJECT_ALTNAMES, "DNS:iprc.nlt.in", * to the load_tester_creds.c file as u told but i am getting the following error from the DMN
May 23 13:59:53 localhost charon: 09[DMN] thread 9 received 11 May 23 13:59:54 localhost charon: 09[DMN] killing ourself, received critical signal And also i have one more problem from the beginning... ipsec is not reading any configuration from the ipsec.conf file. If i add rightid or leftid parameters in the ipsec.conf it is not reflecting the the detailed log /var/log/messags. Only it is reading from the ""config setup"" section not from the ""conn %default"" section. Can you please tell me what might be the problem ? Regards, Naren On Tue, May 22, 2012 at 1:59 PM, Martin Willi <mar...@strongswan.org> wrote: > Hi Naren, > > > The Client certificates are generated on demand signed by the CA > > certificate ( load_tester_creds.c file ). How can i add the > > subjectAltName to these on demand certificates ? Is there any > > configuration file ? or do i need to make alterations in the code ? > > No, there is no such configuration option. You'd have to extend the > sources of load tester. > > > I know that the subjectAltName can only be added in the openssl.cnf > > file before generating the certificate. So how can i make the on > > demand certificates to read from my openssl.cnf file ? > > Load tester does not use OpenSSL to generate the certificate, but our > own routines from libstrongswan. To add additional attributes to client > certificates, pass BUILD_* arguments to [1]. See [2] and [3] to read > more about how the credential building facility works. > > Regards > Martin > > [1] > http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libcharon/plugins/load_tester/load_tester_creds.c#l251 > [2] > http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libstrongswan/credentials/credential_factory.h > [3] > http://git.strongswan.org/?p=strongswan.git;a=blob;f=src/libstrongswan/credentials/builder.h > > >
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users