Home / server / Questions / 382132
In Process
BeStRaFe
Asked: 2012-04-23 22:28:48 +0800 CST

Disable Certificate Revocation in vyatta ipsec vpn

  • 772

I have a problem where the VPN on a road warrior configuration.

our windows hosts work fine.

our mac's don't work so well.

Errors from StrongSwan:
ocsp status is stale or not in cache
crl not found
certificate status unknown
issuer cacert not found
X.509 certificate rejected

There is apparently a function in strongswan to disable the revocation module, i can't find where sadly.

vpn ipsec vyatta

1 Answers

    • there is charon.load option in strongswan.conf file. you can manually specify plugin list there, omitting the revocation plugin. but read this first.
    • you can try disabling this module during compilation ./configure --disable-revocation
    • 0