Cisco Cisco Packet Data Interworking Function (PDIF)
IPSec Certificates
▀ CRL Fetching
▄ IPSec Reference, StarOS Release 17
130
CRL Downloads
Download from CDP Extension of Self-certificate
The following diagram illustrates the downloading of CRL from the self-certificate CDP extension (if present) at the
tunnel creation.
tunnel creation.
Figure 25. Call Flow: CRL Download from CDP Extension of Self-certificate
The certificate is then verified against the CRL before it is sent in the CERT payload of the IKE_AUTH message.