Hi Mark,

> I am trying to use the strongSwan VPN client to connect to my strongSwan
> gateway and the connection fails with "constraint check failed: identity
> "ip address of my gateway" required. then it says the selected pair
> config is inapplicable.
> 
> What could be causing this?

The configured hostname (in your case the IP address) has to be
contained as subjectAltName in the gateway's certificate.  That's to
prevent man-in-the-middle attacks.

Regards,
Tobias

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to