<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I'm working with CRLs. I have what I believe is a well-formed CRL using strongSwan 5.6.3:<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Rpi31/etc/swanctl# pki --print --in /etc/swanctl/x509/revoked.der --type crl<br>
</span>
<div> issuer: "C=US, O=rpi31-strongSwan, CN=strongSwan rpi31 Root CA"<br>
</div>
<div> update: this on Sep 08 08:05:51 2018, ok<br>
</div>
<div> next on Sep 15 08:05:51 2018, ok (expires in 6 days)<br>
</div>
<div> serial: 01<br>
</div>
<div> authKeyId: 58:5e:05:3b:53:6e:00:2f:99:a2:1e:3b:ce:c0:86:c7:37:fb:89:fc<br>
</div>
<div> 1 revoked certificate:<br>
</div>
<div> 72:50:d2:f7:36:0d:08:af: Sep 08 08:05:51 2018, superseded<br>
</div>
<span></span><br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
However, swanctl --load-creds reports:</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Rpi31/etc/swanctl# swanctl --load-creds<br>
</span>
<div>loaded certificate from '/etc/swanctl/x509/bls-iPhone7-rpi31Cert.pem'<br>
</div>
<div>loaded certificate from '/etc/swanctl/x509/strongSwanCert.pem'<br>
</div>
<div>loading '/etc/swanctl/x509/revoked.der' failed: parsing X509 certificate failed<br>
</div>
<div>loaded certificate from '/etc/swanctl/x509/bls-android-rpi31Cert.pem'<br>
</div>
<div>loaded certificate from '/etc/swanctl/x509/bls-scout-rpi31Cert.pem'<br>
</div>
<span></span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
In another thread I saw a mention that pem must be loaded, and it appears that it is:<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<span>Sep 7 14:30:05 rpi31 charon-systemd[31880]: loaded plugins: charon-systemd charon-systemd aes des rc2 sha2 sha1 md5 mgf1 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp curve25519 xcbc
cmac hmac attr kernel-netlink resolve socket-default vici updown eap-identity eap-md5 eap-mschapv2 eap-dynamic eap-tls xauth-generic counters<br>
</span><span></span></div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Greatly appreciate solutions, suggestions, or pointers to help resolve.</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks!<br>
</div>
</body>
</html>