I am using a wildcard certificate.

I have managed to setup ikev2 protocol, applied my own certificate but it won't work for subdomains.

Is there any workaround for this or the wildcard should be of a certain format ?


Generally, strongSwan doesn't support wildcard certificates (see e.g. #794). For instance, if the server certificate contains *.example.com as subjectAltName extension strongSwan won't match vpn.example.com against that.

If you have multiple subdomains add a subjectAltName extension for each to the server certificate.

  • works with iOS..in the config i use @*.domain.com – Vitalik Jimbei May 19 '17 at 11:04
  • What config are you referring to? – ecdsa May 19 '17 at 13:16
  • config for straongswan in /etc/ipsec.conf – Vitalik Jimbei May 22 '17 at 6:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.