I have a problem where the VPN on a road warrior configuration.
our windows hosts work fine.
our mac's don't work so well.
Errors from StrongSwan:
ocsp status is stale or not in cache
crl not found
certificate status unknown
issuer cacert not found
X.509 certificate rejected
There is apparently a function in strongswan to disable the revocation module, i can't find where sadly.