strongSwan KVM Tests / ikev2-multi-ca / pathlen
Test ikev2-multi-ca/pathlen
Description
The strongSwan Root CA constrains the path length to one intermediate CA but the Research CA creates a subsidiary Duck Research CA which in turn issues an end entity certificate to roadwarrior carol so that the total path length becomes two. This is detected by gateway moon which aborts the negotiation.