denozord/strongswan-ext
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Migrate ikev2-stroke-bye scenarios to vici

Browse Source
This commit is contained in:
Andreas Steffen committed 2021-06-22 10:23:06 +02:00
1 parent 706c58b291
commit eba2622587
931 files changed
+5934 -5925
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

testing/tests/ikev2/crl-from-cache/description.txt
+5
View File
@@ -0,0 +1,5 @@
By setting <b>revocation = strict</b> a <b>strict CRL policy</b> is enforced on
both roadwarrior <b>carol</b> and gateway <b>moon</b>. When <b>carol</b> initiates
an IPsec connection to <b>moon</b>, both VPN endpoints find a cached CRL in
their <b>/etc/swanctl/x509crl/</b> directories which allows them to immediately verify
the certificate received from their peer.