enabled crl fetching using crlcheckinterval != 0

testing/tests/ikev2/crl-revoked/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+	crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/crl-revoked/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/crl-revoked/pretest.dat

@@ -1,4 +1,3 @@
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 carol::sleep 1 

testing/tests/ikev2/crl-strict/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/crl-strict/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/crl-strict/pretest.dat

@@ -1,5 +1,3 @@
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 carol::sleep 1 

testing/tests/ikev2/double-nat-net/hosts/alice/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/double-nat-net/hosts/bob/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/double-nat/hosts/alice/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+	crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/double-nat/hosts/bob/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-clear/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-clear/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-hold/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-hold/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-restart/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/dpd-restart/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-cert/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-cert/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-swapped/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-swapped/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-transport/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/host2host-transport/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/nat-one-rw/hosts/alice/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/nat-one-rw/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/nat-two-rw/hosts/alice/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/nat-two-rw/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+	crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/nat-two-rw/hosts/venus/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-cert/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-cert/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-cert/posttest.dat

@@ -2,6 +2,4 @@ moon::ipsec stop
 sun::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 sun::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-sun::rm /etc/ipsec.d/crls/*
 

testing/tests/ikev2/net2net-cert/pretest.dat

@@ -1,7 +1,5 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 sun::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-sun::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 sun::ipsec start
 moon::sleep 1 

testing/tests/ikev2/net2net-route/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-route/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-start/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/net2net-start/hosts/sun/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/ocsp-untrusted-cert/hosts/carol/etc/ipsec.conf

@@ -1,7 +1,6 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
-	crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/ocsp-untrusted-cert/hosts/moon/etc/ipsec.conf

@@ -1,7 +1,6 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
-	crlcheckinterval=180
 	strictcrlpolicy=yes
 	plutostart=no
 

testing/tests/ikev2/ocsp-untrusted-cert/posttest.dat

@@ -1,4 +1,2 @@
 moon::ipsec stop
 carol::ipsec stop
-moon::iptables -F OUTPUT
-carol::iptables -F OUTPUT

testing/tests/ikev2/ocsp-untrusted-cert/pretest.dat

@@ -1,5 +1,3 @@
-moon::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
-carol::iptables -I OUTPUT -d PH_IP_WINNETOU -p tcp --dport 80 -j DROP
 moon::ipsec start
 carol::ipsec start
 carol::sleep 2

testing/tests/ikev2/protoport-dual/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/protoport-dual/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/protoport-route/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/protoport-route/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-cert/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-cert/hosts/dave/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-cert/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-cert/posttest.dat

@@ -4,6 +4,3 @@ dave::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 dave::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-carol::rm /etc/ipsec.d/crls/*
-dave::rm /etc/ipsec.d/crls/*

testing/tests/ikev2/rw-cert/pretest.dat

@@ -1,9 +1,6 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 carol::/etc/init.d/iptables start 2> /dev/null
 dave::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 dave::ipsec start

testing/tests/ikev2/rw-psk-rsa-mixed/hosts/dave/etc/ipsec.conf

@@ -2,6 +2,7 @@
 
 config setup
 	strictcrlpolicy=no
+        crlcheckinterval=180
 	plutostart=no
 
 conn %default

testing/tests/ikev2/rw-psk-rsa-mixed/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-psk-rsa-mixed/posttest.dat

@@ -4,6 +4,3 @@ dave::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 dave::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-carol::rm /etc/ipsec.d/crls/*
-dave::rm /etc/ipsec.d/crls/*

testing/tests/ikev2/rw-psk-rsa-mixed/pretest.dat

@@ -1,9 +1,7 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 carol::/etc/init.d/iptables start 2> /dev/null
 dave::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
+carol::rm /etc/ipsec.d/cacerts/*
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 dave::ipsec start

testing/tests/ikev2/rw-psk-rsa-split/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,8 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
+	strictcrlpolicy=no
 	plutostart=no
 
 conn %default

testing/tests/ikev2/rw-psk-rsa-split/hosts/dave/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/rw-psk-rsa-split/posttest.dat

@@ -4,6 +4,3 @@ dave::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 dave::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-carol::rm /etc/ipsec.d/crls/*
-dave::rm /etc/ipsec.d/crls/*

testing/tests/ikev2/rw-psk-rsa-split/pretest.dat

@@ -1,9 +1,6 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 carol::/etc/init.d/iptables start 2> /dev/null
 dave::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 dave::ipsec start

testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/strong-keys-certs/posttest.dat

@@ -4,9 +4,6 @@ dave::ipsec stop
 moon::/etc/init.d/iptables stop 2> /dev/null
 carol::/etc/init.d/iptables stop 2> /dev/null
 dave::/etc/init.d/iptables stop 2> /dev/null
-moon::rm /etc/ipsec.d/crls/*
-carol::rm /etc/ipsec.d/crls/*
-dave::rm /etc/ipsec.d/crls/*
 moon::rm /etc/ipsec.d/private/*
 carol::rm /etc/ipsec.d/private/*
 dave::rm /etc/ipsec.d/private/*

testing/tests/ikev2/strong-keys-certs/pretest.dat

@@ -1,9 +1,6 @@
 moon::/etc/init.d/iptables start 2> /dev/null
 carol::/etc/init.d/iptables start 2> /dev/null
 dave::/etc/init.d/iptables start 2> /dev/null
-moon::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-carol::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
-dave::wget -q http://crl.strongswan.org/strongswan.crl -O /etc/ipsec.d/crls/strongswan.crl
 moon::ipsec start
 carol::ipsec start
 dave::ipsec start

testing/tests/ikev2/wildcards/hosts/carol/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/wildcards/hosts/dave/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no
 

testing/tests/ikev2/wildcards/hosts/moon/etc/ipsec.conf

@@ -1,6 +1,7 @@
 # /etc/ipsec.conf - strongSwan IPsec configuration file
 
 config setup
+        crlcheckinterval=180
 	strictcrlpolicy=no
 	plutostart=no