fix(ipsec): подтвердить сертификатный клиент и сообщать сбой истории

backend/src/services/ipsec-live.ts

@@ -280,7 +280,10 @@ export function mapClients(state: IpsecServerState): IpsecClientDto[] {
     const comment = identity?.comment ?? ""
     const mcName = (identity?.["mode-config"] ?? "").trim()
     const cn = String(cert["common-name"] ?? "").trim()
-    const active = (cn ? findActive(cn) : undefined)
+    // Our issued certificates have a single CN subject; match the whole DN, never a CN substring.
+    const singleCn = cn && !/[,+=<>;\\"\u0000]/.test(cn) && state.certs.filter(c => c["common-name"] === cn).length === 1
+      ? activeByRemote.get(`CN=${cn}`) : undefined
+    const active = (cn ? findActive(cn) : undefined) ?? singleCn
       ?? (identity?.["remote-id"] ? findActive(String(identity["remote-id"]).trim()) : undefined)
     out.push({
       id: `${server.id}:${identity ? "identity" : "cert"}:${String(identity?.[".id"] ?? cert[".id"] ?? certName)}`,