[strongSwan] CRLs over IPsec tunnels

[Martin Willi]

Hi,

> 1)Charon HTTP requests use the protocol and port from "/etc/services" (e.g. TCP/80)?
> 2)Charon supports the rfc3986 - Uniform Resource Identifier (URI): Generic Syntax?

CRL fetching is delegated to libcurl (http://curl.haxx.se/libcurl/). I
assume it uses /etc/services, but have never investigated this further.
RFC3986 URIs are supported, but we currently fetch from http(s), ftp and
file:// URIs only.

LDAP URIs are supported through the ldap plugin, which is built on
libldap.

Regards
Martin