[strongSwan] Which source IP@ is used to retrieve CRLs?

[Andreas Steffen]

Hello Mugur,

I don't quite understand your question. Charon does a HTTP-based
CRL fetch using either the curl or soup plugin. The source IP
of the HTTP request belongs to charon's network interface via which
the daemon is able to reach the HTTP server.

Regards

Andreas

On 11/23/2011 05:53 PM, ABULIUS, MUGUR (MUGUR) wrote:
> Hi,
> Assuming the ipsec.conf defines several connections with different
> “left=” and “right=” values, which source IP@ is used by strongSwan to
> retrieve CRLs from a CDP? In our case URI is a HTTP URI. Charon is used.
> Best Regards
> Mugur

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==