From 568905f488e63e28778f87ac0e38d845f45bae79 Mon Sep 17 00:00:00 2001
From: René Mayrhofer <rene@mayrhofer.eu.org>
Date: Sat, 5 Mar 2011 09:20:09 +0100
Subject: Imported Upstream version 4.5.1

---
 testing/tests/openssl-ikev2/critical-extension/description.txt | 5 +++++
 1 file changed, 5 insertions(+)
 create mode 100644 testing/tests/openssl-ikev2/critical-extension/description.txt

(limited to 'testing/tests/openssl-ikev2/critical-extension/description.txt')

diff --git a/testing/tests/openssl-ikev2/critical-extension/description.txt b/testing/tests/openssl-ikev2/critical-extension/description.txt
new file mode 100644
index 000000000..8c0d37c88
--- /dev/null
+++ b/testing/tests/openssl-ikev2/critical-extension/description.txt
@@ -0,0 +1,5 @@
+A connection between the subnets behind the gateways <b>moon</b> and <b>sun</b> is set up.
+The authentication is based on <b>X.509 certificates</b> which contain a <b>critical</b> but
+unsupported 'strongSwan' extension. Whereas <b>moon</b> ignores unsupported critical 
+extensions by setting <b>libstrongswan.x509.enforce_critical = no</b> in strongswan.conf,
+<b>sun</b> discards such certificates and aborts the connection setup.
-- 
cgit v1.2.3