enabled crl fetching using crlcheckinterval != 0

2007-04-05 17:40:33 +00:00
parent 1d1e55b4c3
commit 389623374f
64 changed files with 50 additions and 37 deletions
@@ -1,6 +1,8 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
+        crlcheckinterval=180
+	strictcrlpolicy=no
 	plutostart=no

 conn %default
@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file

 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no

@@ -4,6 +4,3 @@ dave::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 dave::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-carol::rm /etc/ipsec.d/crls/*
-dave::rm /etc/ipsec.d/crls/*
@@ -1,9 +1,6 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 carol::/etc/init.d/iptables start 2> /dev/null
 dave::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 dave::ipsec start