added crl-from-cache

This commit is contained in:
Andreas Steffen committed 2007-04-05 17:18:15 +00:00
1 parent a224faf9ea
commit 7771780b38
7 files changed
+93

No files matched your search

@@ -0,0 +1,5 @@
By setting <b>strictcrlpolicy=yes</b> a <b>strict CRL policy</b> is enforced on
both roadwarrior <b>carol</b> and gateway <b>moon</b>. When <b>carol</b> initiates
an IPsec connection to <b>moon</b>, both VPN endpoints find a cached CRL in
their <b>/etc/ipsec.d/crls/</b> directories which allows them to immediately verify
the certificate received from their peer.