description.txt

来自「openswan」· 文本 代码 · 共 42 行

This test is identical to x509-pluto-06, except that the policy is set to
strict, and there is no CRL. So it fails.

The network is configured as follows:

    POLE
      |
    NORTH
      |
      NIC---EAST--SUNRISE

East does not have north's certificate cached. 
East will send a CR to north.

East also doesn't have a specific policy for north, but rather, 
will accept anything that is signed by a specific CA.


North will transmit its certificate to east via nic. 
North's certificate  is issued by a CA east accepts (cacerts/caCert.pem), and
so should be accepted.

East has a CRL list that shows that north's certificate is okay.
East has a strict policy, so it must have the CRL, but the CRL is absent.

NIC serves as a simple router between NORTH and EAST.

The simple test is to connect the POLE and SUNRISE networks
together. This is tested with a ping, a la "basic-pluto-03"