1

I have a problem where the VPN on a road warrior configuration.

our windows hosts work fine.

our mac's don't work so well.

Errors from StrongSwan:
ocsp status is stale or not in cache
crl not found
certificate status unknown
issuer cacert not found
X.509 certificate rejected

There is apparently a function in strongswan to disable the revocation module, i can't find where sadly.

BeStRaFe
  • 280
  • 1
  • 9

1 Answers1

0
  • there is charon.load option in strongswan.conf file. you can manually specify plugin list there, omitting the revocation plugin. but read this first.
  • you can try disabling this module during compilation ./configure --disable-revocation
mighq
  • 355
  • 3
  • 11