Tobias, Thanks for the info. Is this set for the android client only because I have never set the subjectAltname field for any of my certificates before, I only have this problem with the android client.
------------------------------ On Sun, Sep 23, 2012 2:01 AM EDT Tobias Brunner wrote: >Hi Mark, > >> I am trying to use the strongSwan VPN client to connect to my strongSwan >> gateway and the connection fails with "constraint check failed: identity >> "ip address of my gateway" required. then it says the selected pair >> config is inapplicable. >> >> What could be causing this? > >The configured hostname (in your case the IP address) has to be >contained as subjectAltName in the gateway's certificate. That's to >prevent man-in-the-middle attacks. > >Regards, >Tobias _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
