[Openswan Users] certs, but need of leftid?

tobias.gruber at uni-ulm.de tobias.gruber at uni-ulm.de
Tue Nov 11 11:42:28 EST 2008


Hello,

my connection is now working with certs.
But I have a question. If I put out on the client and server the  
leftid=@vpnserver.test.com
then it comes a failure: malformed package...

here my config on the client side:
conn home
	keyingtries=1
	right=10.203.25.241
	left=xxx.dyndns.org
	leftid=@vpnserver.test.com
	leftsubnet=192.168.2.0/24
	auto=add
	pfs=no
	authby=rsasig
	rightcert=client1Cert.pem
	rightrsasigkey=%cert
	leftrsasigkey=%cert

My Certifications have an subjectAltName extension  
(DNS:vpnserver.test.com in server cert) and DNS:client1.test.com in  
client1 cert.

Regards
Tobias



More information about the Users mailing list