[strongSwan] Which source IP@ is used to retrieve CRLs?

Andreas Steffen andreas.steffen at strongswan.org
Wed Nov 23 19:29:42 CET 2011

Hello Mugur,

I don't quite understand your question. Charon does a HTTP-based
CRL fetch using either the curl or soup plugin. The source IP
of the HTTP request belongs to charon's network interface via which
the daemon is able to reach the HTTP server.



On 11/23/2011 05:53 PM, ABULIUS, MUGUR (MUGUR) wrote:
> Hi,
> Assuming the ipsec.conf defines several connections with different
> “left=” and “right=” values, which source IP@ is used by strongSwan to
> retrieve CRLs from a CDP? In our case URI is a HTTP URI. Charon is used.
> Best Regards
> Mugur

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list