Hi Anthony, > Our security department is insisting that strongswan validate the nonce > parameter when received. > > Is there a way strongswan can accommodate this request.
I pushed some changes to that effect to the ocsp-nonce branch [1]. > If not we need a way to disable OCSP. You can do so via charon.plugins.revocation.enable_ocsp. Regards, Tobias [1] https://git.strongswan.org/?p=strongswan.git;a=shortlog;h=refs/heads/ocsp-nonce
