Re: Periodic certificate validation check

[Bill Sommerfeld <sommerfeld@east.sun.com>]

> If the certificate gets revoked after the connection is established,
> does the implementation ... check periodically for the validity of
> the certificate in between a running connection? 

Not that I've seen.

In many cases you can get the revocation behavior you seem to want by
using a relatively short lifetime on your IKE SA, forcing the cert to
be re-validated on a regular basis.

					- Bill