[Openswan Users] Openswan 2.2 and Safenet Client

[Paul Wouters]

On Thu, 18 Nov 2004, Rolf Offermanns wrote:

>> Try removing the @ symbol. It has a special meaning.
>> 
>> (and mail me back if this indeed solved your problem)
>> 
> I don't think this is the problem, since it works here.
> The Email address *must* be contained in the certs. subjectAltName attribute.
> Otherwise openswan will not accept it as id.

As far as I could understand your config, there was no certificates involved
with proper Subject from the X.509 certificate in the left/rightid= field. You
were using straight email address syntax as id.

It also tells you INVALID_ID. The id is just wrong.

Paul