testing: Make RADIUS server enforce client identity in certificate's CN

testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/alice/etc/freeradius/3.0/mods-available/eap

@@ -7,6 +7,7 @@ eap {
     ca_file = ${cadir}/strongswanCert.pem
     cipher_list = "DEFAULT"
     random_file = ${certdir}/random
+    check_cert_cn = %{User-Name}
   }
 
   tls {

testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/carol/etc/ipsec.conf

@@ -10,6 +10,7 @@ conn %default
 conn home
 	left=PH_IP_CAROL
 	leftcert=carolCert.pem
+	leftid=carol@strongswan.org
 	leftauth=eap
 	leftfirewall=yes
 	right=PH_IP_MOON

testing/tests/ikev2-stroke/rw-eap-tls-radius/hosts/moon/etc/ipsec.conf

@@ -15,7 +15,7 @@ conn rw-eap
 	leftcert=moonCert.pem
 	leftauth=pubkey
 	leftfirewall=yes
-	rightid="C=CH, O=strongSwan Project, OU=Research, CN=carol@strongswan.org"
+	rightid=carol@strongswan.org
 	rightauth=eap-radius
 	rightsendcert=never
 	right=%any