denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

tests with subdirectory structure

Browse Source
This commit is contained in:
Andreas Steffen
2006-07-03 07:11:30 +00:00
parent 92069df82f
commit 6db2ac30c7
607 changed files with 9414 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev1/crl-ldap/description.txt
+9
View File
@@ -0,0 +1,9 @@
By setting <b>strictcrlpolicy=yes</b> a <b>strict CRL policy</b> is enforced on
both roadwarrior <b>carol</b> and gateway <b>moon</b>. Thus when <b>carol</b> initiates
the connection and only an expired CRL cache file in <b>/etc/ipsec.d/crls</b> is
available, the Main Mode negotiation fails. A http fetch for an updated CRL fails
because the web server is currently not reachable. Thus the second Main Mode negotiation
fails, too. Finally an ldap fetch to get the CRL from the LDAP server <b>winnetou</b>
is triggered. When the third Main Mode trial comes around, the fetched CRL has become
available and the IKE negotiation completes. The new CRL is again cached locally as a
file in <b>/etc/ipsec.d/crls</b> due to the <b>cachecrls=yes</b> option.