> you'll have to invoke "ipsec purgex509" to flush the internal > certificate cash. There is a small but nasty bug in the snapshot, use "ipsec stroke purgex509" as a workaround. > could you rename the new commands to > "ipsec purgecrls" and "ipsec purgecerts" Upcoming releases will use the new naming scheme. Regards Martin