description.txt

ipsec vpn

Basic pluto X.509 test, with send_cr.

East does *NOT* have West's X.509 Cert locally.
east is FORCED to send it.

However, the certificate that east sends is bogus.
West, pre-2.2 and pre-2.1.3 will believe it.

This is CAN-2004-0590.