Re: [strongSwan] temporarily disable a road warrior user

2014-02-19 Thread Martin Willi
Hi Karl, How can I temporarily disable the user, without revoking the certificate, can I do that? Do I revoke it, and to re-enable by removing it from the CRL? Is there an easier way? Setting the certificate on-hold is certainly an option, using a CRL or even better an OCSP service.

Re: [strongSwan] temporarily disable a road warrior user

2014-02-19 Thread Dirk Hartmann
Hi Karl, --On Tuesday, February 18, 2014 06:24:46 PM +0100 Karl Hiramoto k...@hiramoto.org wrote: I have multiple road warriors with their own certificates. How can I temporarily disable the user, without revoking the certificate, can I do that? I assume you don't have an unique entry