testing: Make RADIUS server enforce client identity in certificate's CN

2024-06-17 14:47:11 +02:00
parent dc1085734f
commit 1cbcf198ab
8 changed files with 10 additions and 6 deletions
@@ -7,6 +7,7 @@ eap {
    ca_file = ${cadir}/strongswanCert.pem
    cipher_list = "DEFAULT"
    random_file = ${certdir}/random
+    check_cert_cn = %{User-Name}
  }

  tls {
@@ -7,6 +7,7 @@ connections {
      local {
         auth = eap
         certs = carolCert.pem
+         id = [email protected]
         aaa_id = "C=CH, O=strongSwan Project, CN=aaa.strongswan.org"
      }
      remote {
@@ -9,7 +9,7 @@ connections {
      }
      remote {
         auth = eap-radius
-         id = "C=CH, O=strongSwan Project, OU=Research, CN=[email protected]"
+         id = [email protected]
      }
      children {
         net {