[Openswan Users] openswan-2 CVS x509/cert issue? (no RSA public key known)

[Dax Kelson]

On Fri, 2004-04-23 at 13:45, Ken Bantoft wrote:
> Your left/right ID's are wrong.  Should be in the X.509 CN format, not 
> RSASig style.  eg:
> 
> leftid="C=CA, ST=Ontario, L=Toronto, O=Xelerance, OU=North America, CN=Ken Bantoft/emailAddress=ken at xelerance.com"

I thought you could use @FQDN if your certificates used subjectAltNames?

openssl x509 -text -in fw.gurulabs.com-hostCert.pem  | grep -A 1 Alternative
            X509v3 Subject Alternative Name:
            DNS:fw.gurulabs.com

openssl x509 -text -in intruder.gurulabs.com-hostCert.pem | grep -A 1 Alternative
            X509v3 Subject Alternative Name:
                DNS:intruder.gurulabs.com