Hi Yogesh, > so I tried configuring right id as strongswan is expecting, and tunnel was > established.
You mean with E instead of emailAddress? No other changes? > So why is strongswan not using complete '*emailAddress*' field of > Subject distinguished name and only '*E*' instead ? emailAddress should be an alias for E. So not sure what went wrong initially. Regards, Tobias