# Check that mainca is present
ipsec crlutil -L | grep mainca
# DANGER: race.
#
# Wait for the CRL fetch helper to be triggered and fetch the CRLs.
# The first fetch, which happens happens after 5s, may or may-not be
# too quick for the exchange.
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=nic.testing.libreswan.org'
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=hashsha1.testing.libreswan.org'
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=north.testing.libreswan.org'
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=road.testing.libreswan.org'
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=east.testing.libreswan.org'
../../guestbin/wait-for-pluto.sh 'imported CRL.*CN=Libreswan test CA for mainca'
# check the queue is drained
ipsec auto --listcrls
