The Ubuntu strongSwan 5.6.1 base application I am working with validates certificates wth CRLs using OpenSSL before installing all certs and CRLs via a VICI interface.
* I am surprised to see this code as I thought it would be part of strongSwan certification validation. * I have not yet found any words that describe what certificate validation is performed by strongSwan. Please point me at the words that describe how strongSwan validates certificates against ICA and CA certificates, and also CRLs. * My concern is that I will delete this duplicated application functionality, only to find it is really required. Philip Taylor