Use IDTYPE_ASN1DN when using certificates.

When using certificates, the server (racoon) checks whether the subjectAltName
matches the given identifier. Using the address as identifier is therefore
impossible for roadwarriors. Using the certificate's DN looks like a reasonable
alternative.

Change-Id: I9ed81478dc115276c807329228b2f9dfd4957b74

1 files changed, 1 insertions, 0 deletions

diff --git a/setup.c b/setup.c
index 94cc9b8..b56c503 100644
--- a/setup.c
+++ b/setup.c
@@ -261,6 +261,7 @@ void setup(int argc, char **argv)
         pre_shared_key = argv[3];
         auth = OAKLEY_ATTR_AUTH_METHOD_PSKEY;
     } else {
+        remoteconf.idvtype = IDTYPE_ASN1DN;
         remoteconf.myprivfile = argv[3];
         remoteconf.mycertfile = argv[4];
         remoteconf.cacertfile = argv[5];