strongSwan KVM Tests / ikev2 / ocsp-timeouts-unknown
Test ikev2/ocsp-timeouts-unknown
Description
This scenario is based on ikev2/ocsp-signer-cert and tests the timeouts of the libcurl library used for http-based OCSP fetching by adding two ocsp_uris in moon's strongswan authorities section on the first of which no OCSP server is listening and the second URI cannot be resolved by DNS. Since the certificate status is unknown the connection setup is aborted by moon with an AUTHORIZATION_FAILED notification sent to carol.