[Swan] Wildcards in rightid DistinguishedName
Kavinda.Wewegama at forcepoint.com
Fri Feb 12 20:23:41 UTC 2021
There is a known issue involving RDN wildcard matching: https://github.com/libreswan/libreswan/issues/335
> -----Original Message-----
> From: Swan <swan-bounces at lists.libreswan.org> On Behalf Of Manfred
> Sent: Friday, February 12, 2021 11:29 AM
> To: swan at lists.libreswan.org
> Subject: EXTERNAL: [Swan] Wildcards in rightid DistinguishedName
> Following the example in:
> where it says:
> > # optional rightid with restrictions
> > # rightid="C=CA, L=Toronto, O=Libreswan Project, OU=*, CN=*, E=*"
> I see that wildcards are allowed, but using "... CN=*.example.com" fails to
> match "... CN=test.example.com"
> As far as I can see only rightid="... CN=test.example.com" or rightid="...
> CN=*" may be used to match this DNS name.
> Is there any way to match partial wildcards for DN components?
> Thanks in advance for any clarification.
> Swan mailing list
> Swan at lists.libreswan.org
More information about the Swan