diff options
| author | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2007-06-03 17:36:35 +0000 |
|---|---|---|
| committer | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2007-06-03 17:36:35 +0000 |
| commit | 08ee5250bd9c43fda5f24d10b791ca2c4c17fcee (patch) | |
| tree | d4e2fc7144e288d624555a38955593e1ee066531 /testing/tests/ikev2/crl-ldap | |
| parent | b0d8ed94fe9e74afb49fdf5f11e4add29879c65c (diff) | |
| download | vyos-strongswan-08ee5250bd9c43fda5f24d10b791ca2c4c17fcee.tar.gz vyos-strongswan-08ee5250bd9c43fda5f24d10b791ca2c4c17fcee.zip | |
[svn-upgrade] Integrating new upstream version, strongswan (4.1.3)
Diffstat (limited to 'testing/tests/ikev2/crl-ldap')
| -rw-r--r-- | testing/tests/ikev2/crl-ldap/description.txt | 2 | ||||
| -rwxr-xr-x | testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/testing/tests/ikev2/crl-ldap/description.txt b/testing/tests/ikev2/crl-ldap/description.txt index d7ed591cc..46e7a6961 100644 --- a/testing/tests/ikev2/crl-ldap/description.txt +++ b/testing/tests/ikev2/crl-ldap/description.txt @@ -1,6 +1,6 @@ By setting <b>strictcrlpolicy=yes</b> a <b>strict CRL policy</b> is enforced on both roadwarrior <b>carol</b> and gateway <b>moon</b>. Thus when <b>carol</b> initiates the connection and only an expired CRL cache file in <b>/etc/ipsec.d/crls</b> is -availabl, an ldap fetch to get the CRL from the LDAP server <b>winnetou</b> is +available, an ldap fetch to get the CRL from the LDAP server <b>winnetou</b> is successfully started and the IKE authentication completes. The new CRL is again cached locally as a file in <b>/etc/ipsec.d/crls</b> due to the <b>cachecrls=yes</b> option. diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf index 3b1fbabb8..47a52b60b 100755 --- a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf +++ b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/ipsec.conf @@ -8,7 +8,7 @@ config setup ca strongswan cacert=strongswanCert.pem - crluri="ldap://ldap1.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" + crluri="ldap://ldap.strongswan.org/cn=strongSwan Root CA, o=Linux strongSwan, c=CH?certificateRevocationList" auto=add conn %default |