diff options
| author | Martin Willi <martin@strongswan.org> | 2006-04-28 07:14:48 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2006-04-28 07:14:48 +0000 |
| commit | 997358a6c475c8886cce388ab325184a1ff733c9 (patch) | |
| tree | 27a15790e030fc186d00cd710d2a3540f4defe69 /testing/tests/ocsp-revoked/description.txt | |
| parent | 52923c9acb349adec3d1cc039e7a74c2e822da6e (diff) | |
| download | strongswan-997358a6c475c8886cce388ab325184a1ff733c9.tar.bz2 strongswan-997358a6c475c8886cce388ab325184a1ff733c9.tar.xz | |
- import of strongswan-2.7.0
- applied patch for charon
Diffstat (limited to 'testing/tests/ocsp-revoked/description.txt')
| -rw-r--r-- | testing/tests/ocsp-revoked/description.txt | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/testing/tests/ocsp-revoked/description.txt b/testing/tests/ocsp-revoked/description.txt new file mode 100644 index 000000000..cbdd1305a --- /dev/null +++ b/testing/tests/ocsp-revoked/description.txt @@ -0,0 +1,7 @@ +By setting <b>strictcrlpolicy=yes</b> a <b>strict CRL policy</b> is enforced on +both roadwarrior <b>carol</b> and gateway <b>moon</b>. Thus when <b>carol</b> initiates +the connection and no current revocation information is available, the Main Mode +negotiation fails but an OCSP request issued to the OCSP server <b>winnetou</b>. +When the second Main Mode trial comes around the OCSP response will be available +but because the certificate presented by carol has been revoked, +the IKE negotatiation will fail.. |