I re-created server certificate using
--subject-alt-name="IP:123.123.123.123" and now MacOS clients connect well.
Thank you, Tobias!
Tobias Brunner <tob...@strongswan.org> писал(а) в своём письме Tue, 14 Jan
2020 17:50:34 +0200:
Hi,
How I can change leftid for strongswan? It always CN=123.123.123.123 no
matter what I configure in ipsec.conf, even leftid=%any doesn't work.
You need to include that IP address (or alternatively a hostname) as
subjectAltName extension in the certificate.
Regards,
Tobias
