[strongSwan] Dynamic update of End Entity Certificate

[divya mohan]

Hi,

Hi,

Thanks for the clarification.

'ipsec reload' would be a costly operation since it would terminate
all the connections and add them back.
Is there any way to terminate and add back only one connection, out of many?

Is it possible to achieve a reload of a single connection with 'ipsec'
tool, by sending stroke down, stroke delete, and then stroke add, for
that?


Regards,
Divya Mohan M




On Mon, Jun 18, 2012 at 2:59 PM, Tobias Brunner <tobias at strongswan.org> wrote:
> Since the end entity certificates are configured with left|rightcert you
> have to use 'ipsec reload' to reload them.