From e72164832858fc801bb5b0ef0a93e22df720910e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Lauri=20V=C3=B5sandi?= Date: Tue, 29 Mar 2016 12:28:10 +0300 Subject: [PATCH] Use common name instead of IP address as listening address for IPSec gateway --- certidude/templates/strongswan-site-to-client.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/certidude/templates/strongswan-site-to-client.conf b/certidude/templates/strongswan-site-to-client.conf index 2227539..6d838d2 100644 --- a/certidude/templates/strongswan-site-to-client.conf +++ b/certidude/templates/strongswan-site-to-client.conf @@ -16,7 +16,7 @@ conn site-to-clients auto=add right=%any # Allow connecting from any IP address rightsourceip={{subnet}} # Serve virtual IP-s from this pool - left={{local}} # Gateway IP address + left={{common_name}} # Gateway IP address leftcert={{certificate_path}} # Gateway certificate {% if route %} {% if route | length == 1 %}