Hi,

I have a question regarding IPSec with Certificate Authentication where
Certificate contains Multiple IP-Address in Subject Alternative name
extension.

X509v3 Subject Alternative Name:

                IP Address:10.0.0.1, IP Address:20.0.0.1

While checking Cert Validity against identity.
Is it expected to check all IP-Address present in SAN.
or just the first IP-Address is expected to check ?

Best regards,
Deepak
91- 9632308791
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to