Package: strongswan Version: 4.4.1-5 Severity: normal
Hi. It according to the documentation strictcrlpolicy = ifuri should mean, that CRLs are only required to be there, if an according URI is set in the certificate. On my testsystem I'm using certificates without CRL URLs, but the connection fails (with some messages that CRL status must be GOOD or SKIPPED) when I have it set to "ifuri". Setting it to no, any the connection works. Cheers, Chris. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org