testing: Make RADIUS server enforce client identity in certificate's CN

2024-06-17 14:47:11 +02:00
parent dc1085734f
commit 1cbcf198ab
8 changed files with 10 additions and 6 deletions
@@ -7,6 +7,7 @@ eap {
    ca_file = ${cadir}/strongswanCert.pem
    cipher_list = "DEFAULT"
    random_file = ${certdir}/random
+    check_cert_cn = %{User-Name}
  }

  tls {
@@ -10,6 +10,7 @@ conn %default
 conn home
 	left=PH_IP_CAROL
 	leftcert=carolCert.pem
+	[email protected]
 	leftauth=eap
 	leftfirewall=yes
 	right=PH_IP_MOON
@@ -15,7 +15,7 @@ conn rw-eap
 	leftcert=moonCert.pem
 	leftauth=pubkey
 	leftfirewall=yes
-	rightid="C=CH, O=strongSwan Project, OU=Research, CN=[email protected]"
+	[email protected]
 	rightauth=eap-radius
 	rightsendcert=never
 	right=%any