Package: strongswan
Version: 4.4.1-5
Severity: normal

Hi.

It according to the documentation strictcrlpolicy = ifuri should mean, that
CRLs are only required to be there, if an according URI is set in the 
certificate.

On my testsystem I'm using certificates without CRL URLs, but the connection 
fails
(with some messages that CRL status must be GOOD or SKIPPED) when I have it set
to "ifuri".
Setting it to no, any the connection works.


Cheers,
Chris.



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to