In the wiki page that specifies a configuration that works for iOS devices
(http://wiki.strongswan.org/projects/strongswan/wiki/IOS_(Apple) ) it says in
the section titled "Install Certificates":
"It is not necessary to keep the client certificate on the server, but it
can be useful to use it as an ID (rightcert=clientCert.pem)"
Is the ID referred to the ID that is used to determine (and prevent) multiple
connections from the same ID and IP so that if I issued different certificates
for a person's different iOS devices I would not need to set "uniqueids=never"
in ipsec.conf to allow them to login multiple devices from the same IP?
Do I also need to store the certificate key as shown in the example or is it
sufficient to store only the certificate files for the individual users.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users