denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

testing: Use a single OCSP responder for ikev2-multi-ca/ocsp-signers scenario

Browse Source 
This demonstrates the multi-CA capabilities of the pki --ocsp command.
This commit is contained in:
Tobias Brunner
2023-11-13 12:50:47 +01:00
parent c10a13589e
commit 801c6c32e5
2 changed files with 20 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
testing/tests/ikev2-multi-ca/ocsp-signers/hosts/moon/etc/swanctl/swanctl.conf
+5 -5
View File
@@ -11,11 +11,11 @@ connections {
remote {
auth = pubkey
cacerts = researchCert.pem
revocation = ifuri
revocation = ifuri
}
children {
alice {
local_ts = 10.1.0.10/32
local_ts = 10.1.0.10/32
esp_proposals = aes128-sha256-ecp256
}
}
@@ -34,7 +34,7 @@ connections {
remote {
auth = pubkey
cacerts = salesCert.pem
revocation = ifuri
revocation = ifuri
}
children {
venus {
@@ -56,11 +56,11 @@ authorities {
research {
cacert = researchCert.pem
ocsp_uris = http://ocsp.strongswan.org:8881
ocsp_uris = http://ocsp.strongswan.org:8880
}
sales {
cacert = salesCert.pem
ocsp_uris = http://ocsp.strongswan.org:8882
ocsp_uris = http://ocsp.strongswan.org:8880
}
}