Re: [strongSwan] IKEv2 and MacOS roadwarrior

[korsar...@gmail.com]

I re-created server certificate using  
--subject-alt-name="IP:123.123.123.123" and now MacOS clients connect well.
Thank you, Tobias!

Tobias Brunner <tob...@strongswan.org> писал(а) в своём письме Tue, 14 Jan  
2020 17:50:34 +0200:

Hi,

How I can change leftid for strongswan? It always CN=123.123.123.123 no
matter what I configure in ipsec.conf, even leftid=%any doesn't work.

You need to include that IP address (or alternatively a hostname) as
subjectAltName extension in the certificate.

Regards,
Tobias