summaryrefslogtreecommitdiff
path: root/testing/tests/ikev1/crl-from-cache/description.txt
diff options
context:
space:
mode:
Diffstat (limited to 'testing/tests/ikev1/crl-from-cache/description.txt')
-rw-r--r--testing/tests/ikev1/crl-from-cache/description.txt5
1 files changed, 5 insertions, 0 deletions
diff --git a/testing/tests/ikev1/crl-from-cache/description.txt b/testing/tests/ikev1/crl-from-cache/description.txt
new file mode 100644
index 000000000..17866f572
--- /dev/null
+++ b/testing/tests/ikev1/crl-from-cache/description.txt
@@ -0,0 +1,5 @@
+By setting <b>strictcrlpolicy=yes</b> a <b>strict CRL policy</b> is enforced on
+both roadwarrior <b>carol</b> and gateway <b>moon</b>. When <b>carol</b> initiates
+an IPsec connection to <b>moon</b>, both VPN endpoints find a cached CRL in
+their <b>/etc/ipsec.d/crls/</b> directories which allows them to immediately verify
+the certificate received from their peer.