[Swan] IKE failure/Issue with Subject Alternative Name

[Mayur Nakade]

Hi Paul,

Okay sure thanks for the input Paul, i'll check by removing '&' from 'OU' in certificates.
But considering the error with verifying the subject alternate name, as theres no direct relation between SubjAltName and OU used  so thinking what else can be checked.

Thanks
Mayur
________________________________
From: Paul Wouters <paul at nohats.ca>
Sent: 13 October 2023 20:49
To: Mayur Nakade <Mayur.Nakade at radisys.com>
Cc: swan at lists.libreswan.org <swan at lists.libreswan.org>
Subject: Re: [Swan] IKE failure/Issue with Subject Alternative Name

The e-mail below is from an external source. Please do not open attachments or click links from an unknown or suspicious origin.

On Fri, 13 Oct 2023, Mayur Nakade wrote:

> Subject: Re: [Swan] IKE failure/Issue with Subject Alternative Name

> As asked please find attachment having the output of the command you asked to run, to check
> certificate content.

Those look okay, other than that they should not contain the "&" symbol
as that can lead to issues in validation with some crypto libraries if
I'm not mistaken.

Paul
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20231016/b3b8a016/attachment.htm>