ecarlseen

x509 Name Constraints checking applied as AND rather than OR?

2

We're trying to connect a peer to Strongswan using x509 authentication and certificates from our private CA, and failing with the following message in our logs (host and domain names...