21.02 and 2.5 upgrade breaks ipsec to Checkpoint FW

[bart79]

@jegr hi Jegr
yes you can change it, but pfsense/strongswan won't find a private key, since the ip is not the CN or a SAN of the cert

previously with 2.4/strongSwan 5.8.4 you can chose my ip as identifier without that ip as cn or san of the cert

[bart79]

@jegr the new strongswan/pfsense version, in case of cert ipsec vpn, will look for a private key that corresponds exactly to the identifier

previouly this check wasn't done, in the previous version you can choose also the ip as identifier although it was not "stated" as CN or SAN in the cert used for authentication