From e404a21e92f8036e3f73cd50ddd4365b66efb34f Mon Sep 17 00:00:00 2001
From: toby <toby@wit.com>
Date: Fri, 3 May 2019 15:34:53 +0000
Subject: [PATCH] making it even more obvious that we *want* an ipsec cert

---
 templates/ipsec.conf.wit | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/templates/ipsec.conf.wit b/templates/ipsec.conf.wit
index 4daacf0..70de46e 100644
--- a/templates/ipsec.conf.wit
+++ b/templates/ipsec.conf.wit
@@ -23,7 +23,7 @@ conn %default
     leftcert = FQHOSTNAME.crt
     leftid = "C=US, O=Wit, CN=FQHOSTNAME"
     rightid = "C=US, O=Wit, CN=*"
-    rightid2 = "C=US, O=Wit, OU=DCs, OU=PhyNodes, CN=*"
+    rightid2 = "C=US, O=Wit, OU=DCs, OU=PhyNodes, OU=ipsec, CN=*"
     auto = route