[strongSwan] Dynamic control of enabling/disabling plugins at run time?

Martin Willi martin at strongswan.org
Fri Jun 1 12:59:06 CEST 2012


> So, it would be ideal to have some sort of 'dynamic control at run
> time' in strongswan.conf to indicate which plugin is to be
> 'enabled/disabled'. 

Beside the load statement, there is currently no option to
enable/disable the revocation plugin globally. Have you seen the
ipsec.conf strictcrlpolicy that allows you to accept/reject certificates
whose certificate status can not be obtained?


More information about the Users mailing list