Commit 5b0d506215 for strongswan.org

commit 5b0d506215a7c76b061f55da68a915104a7eb22e
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Mon Jan 5 17:23:06 2026 +0100

    testing: Remove unused revocation and constraints plugins for swanctl

    swanctl doesn't do any (online) certificate validation, it just parses
    and or decrypts them and passes them on to the daemon.

diff --git a/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf b/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf
index 46092a0c59..a60e16147a 100644
--- a/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/af-alg/alg-camellia/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf b/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf
index 46092a0c59..a60e16147a 100644
--- a/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/af-alg/alg-camellia/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf
index 0e729cf320..ceedb1e197 100644
--- a/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/af-alg/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf
index be5956e509..d275d67774 100644
--- a/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/af-alg/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf
index c8656ced27..b8effd8836 100644
--- a/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/af-alg/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/strongswan.conf b/testing/tests/botan/net2net-ed25519/hosts/moon/etc/strongswan.conf
index 27954d8e2f..eccdb8b1f4 100755
--- a/testing/tests/botan/net2net-ed25519/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-ed25519/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem botan x509 revocation constraints
+ swanctl {
+  load = random pem botan x509
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf
index f0c7480ca3..c63c40ab95 100755
--- a/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-ed25519/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/strongswan.conf b/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/strongswan.conf
index 03351e0fe0..da6a0f438d 100644
--- a/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-pkcs12/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs7 pkcs8 pkcs12 botan x509 revocation constraints
+ swanctl {
+  load = pem pkcs7 pkcs8 pkcs12 botan x509
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-pkcs12/hosts/sun/etc/strongswan.conf b/testing/tests/botan/net2net-pkcs12/hosts/sun/etc/strongswan.conf
index 03351e0fe0..da6a0f438d 100644
--- a/testing/tests/botan/net2net-pkcs12/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-pkcs12/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs7 pkcs8 pkcs12 botan x509 revocation constraints
+ swanctl {
+  load = pem pkcs7 pkcs8 pkcs12 botan x509
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
index 51a7747d7e..51e3c00118 100755
--- a/testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem x509 revocation constraints pubkey botan random
+ swanctl {
+  load = pem x509 pubkey botan random
 }

 charon-systemd {
diff --git a/testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
index 51a7747d7e..51e3c00118 100755
--- a/testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/botan/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem x509 revocation constraints pubkey botan random
+ swanctl {
+  load = pem x509 pubkey botan random
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/botan/rw-cert/hosts/carol/etc/strongswan.conf
index e5c6d88b30..9230e2b009 100755
--- a/testing/tests/botan/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/botan/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = botan pem x509 revocation constraints pubkey
+ swanctl {
+  load = botan pem x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf
index d8d81a1bec..fb0c2f838f 100755
--- a/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/botan/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/botan/rw-cert/hosts/moon/etc/strongswan.conf
index 19228ffa54..add932c4b9 100755
--- a/testing/tests/botan/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem botan x509 revocation constraints pubkey
+ swanctl {
+  load = pem botan x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-ecp256/hosts/carol/etc/strongswan.conf b/testing/tests/botan/rw-ecp256/hosts/carol/etc/strongswan.conf
index e5c6d88b30..9230e2b009 100755
--- a/testing/tests/botan/rw-ecp256/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/botan/rw-ecp256/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = botan pem x509 revocation constraints pubkey
+ swanctl {
+  load = botan pem x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-ecp256/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-ecp256/hosts/dave/etc/strongswan.conf
index 3ee76327ce..0830ac034b 100755
--- a/testing/tests/botan/rw-ecp256/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/botan/rw-ecp256/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-ecp256/hosts/moon/etc/strongswan.conf b/testing/tests/botan/rw-ecp256/hosts/moon/etc/strongswan.conf
index 29b16f1073..08034a46fe 100755
--- a/testing/tests/botan/rw-ecp256/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/rw-ecp256/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem botan x509 revocation constraints pubkey
+ swanctl {
+  load = pem botan x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-mlkem/hosts/carol/etc/strongswan.conf b/testing/tests/botan/rw-mlkem/hosts/carol/etc/strongswan.conf
index e5c6d88b30..9230e2b009 100755
--- a/testing/tests/botan/rw-mlkem/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/botan/rw-mlkem/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = botan pem x509 revocation constraints pubkey
+ swanctl {
+  load = botan pem x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-mlkem/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-mlkem/hosts/dave/etc/strongswan.conf
index ec27c324d2..3467fa3aca 100755
--- a/testing/tests/botan/rw-mlkem/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/botan/rw-mlkem/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-mlkem/hosts/moon/etc/strongswan.conf b/testing/tests/botan/rw-mlkem/hosts/moon/etc/strongswan.conf
index 29b16f1073..08034a46fe 100755
--- a/testing/tests/botan/rw-mlkem/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/rw-mlkem/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem botan x509 revocation constraints pubkey
+ swanctl {
+  load = pem botan x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-modp3072/hosts/carol/etc/strongswan.conf b/testing/tests/botan/rw-modp3072/hosts/carol/etc/strongswan.conf
index e5c6d88b30..9230e2b009 100755
--- a/testing/tests/botan/rw-modp3072/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/botan/rw-modp3072/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = botan pem x509 revocation constraints pubkey
+ swanctl {
+  load = botan pem x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf b/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf
index 033ea6b297..70f12a9ca5 100755
--- a/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/botan/rw-modp3072/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/botan/rw-modp3072/hosts/moon/etc/strongswan.conf b/testing/tests/botan/rw-modp3072/hosts/moon/etc/strongswan.conf
index 29b16f1073..08034a46fe 100755
--- a/testing/tests/botan/rw-modp3072/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/botan/rw-modp3072/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem botan x509 revocation constraints pubkey
+ swanctl {
+  load = pem botan x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/strongswan.conf b/testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/strongswan.conf
index 95c6df796a..ac825c4ddc 100644
--- a/testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev1/alg-serpent/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/strongswan.conf b/testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/strongswan.conf
index b340a79f5f..63bda885c1 100644
--- a/testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev1/alg-serpent/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/strongswan.conf b/testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/strongswan.conf
index 95c6df796a..ac825c4ddc 100644
--- a/testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev1/alg-twofish/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/strongswan.conf b/testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/strongswan.conf
index b340a79f5f..63bda885c1 100644
--- a/testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev1/alg-twofish/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf
index 1505c00c1f..1281567630 100644
--- a/testing/tests/gcrypt-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev2/alg-camellia/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf
index 1505c00c1f..1281567630 100644
--- a/testing/tests/gcrypt-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev2/alg-camellia/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev2/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/rw-cert/hosts/carol/etc/strongswan.conf
index 5290ca9595..2daa822912 100644
--- a/testing/tests/gcrypt-ikev2/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev2/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf
index 472001fb98..bbdd2fd5b7 100644
--- a/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev2/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/gcrypt-ikev2/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/gcrypt-ikev2/rw-cert/hosts/moon/etc/strongswan.conf
index 5290ca9595..2daa822912 100644
--- a/testing/tests/gcrypt-ikev2/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/gcrypt-ikev2/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv4/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv4/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf b/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv4/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv6/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv6/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf b/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf
index 2c9a2b2764..2098cc7c36 100755
--- a/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ike/frags-ipv6/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/crls/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/crls/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/crls/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/crls/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/crls/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/crls/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/crls/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/crls/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1-multi-ca/crls/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1-multi-ca/crls/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev1-multi-ca/crls/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1-multi-ca/crls/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload-push/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload-push/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload-push/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/config-payload/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-initiator/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-initiator/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-initiator/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-responder/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-responder/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/dynamic-responder/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-ah/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-ah/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-transport/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/host2host-transport/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf
index 8df41f29db..acb891168d 100755
--- a/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool-db/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf
index 8df41f29db..acb891168d 100755
--- a/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool-db/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf
index d565d55ade..e69dfff1fc 100755
--- a/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool-db/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/ip-pool/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/nat-virtual-ip/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/nat-virtual-ip/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-ah/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-ah/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-esn/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-esn/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-psk-fail/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-psk-fail/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-psk/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev1/net2net-psk/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert-aggressive/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf
index 684b00c672..b31b04cac5 100755
--- a/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf
index 684b00c672..b31b04cac5 100755
--- a/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf
index 04e988511e..c181b153de 100755
--- a/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf
index 9187d8426a..b1d5457595 100755
--- a/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-initiator-only/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-initiator-only/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-initiator-only/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf
index 46772c787e..c61bfd9f7d 100755
--- a/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf
index 46772c787e..c61bfd9f7d 100755
--- a/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf
index 46772c787e..c61bfd9f7d 100755
--- a/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/rw-multi-ciphers/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-psk-config/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-aggressive/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-config/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-id-rsa-hybrid/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-psk/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-psk/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-psk/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf
index 79dff9e488..5580a63be1 100755
--- a/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa-eap-md5-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf
index 74079b9b79..b9149cbb73 100755
--- a/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf
index f8a3472e3a..30dcee5ac1 100755
--- a/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev1/xauth-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-init/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-init/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-init/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/certreq-resp/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls-l3/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls-l3/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls-l3/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls-l3/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls-l3/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls-l3/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls-l3/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls-l3/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls-l3/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls-l3/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls-l3/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls-l3/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/crls/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/crls/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/crls/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/crls/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ldap/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ldap/hosts/carol/etc/strongswan.conf
index 6ae09a00e7..a1d0c24eb2 100644
--- a/testing/tests/ikev2-multi-ca/ldap/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ldap/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ldap/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ldap/hosts/dave/etc/strongswan.conf
index 6ae09a00e7..a1d0c24eb2 100644
--- a/testing/tests/ikev2-multi-ca/ldap/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ldap/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ldap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ldap/hosts/moon/etc/strongswan.conf
index 6ae09a00e7..a1d0c24eb2 100644
--- a/testing/tests/ikev2-multi-ca/ldap/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ldap/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/loop/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/loop/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/loop/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/loop/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/loop/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/loop/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/loop/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/loop/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-signers/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/dave/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/ocsp-strict-ifuri/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/pathlen/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/pathlen/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/pathlen/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/pathlen/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/pathlen/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/pathlen/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/pathlen/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/pathlen/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/revoked/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/revoked/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/revoked/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/revoked/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/revoked/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/revoked/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/carol/etc/strongswan.conf
index 178fa2e7c1..ac2763e4b4 100644
--- a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/dave/etc/strongswan.conf
index 178fa2e7c1..ac2763e4b4 100644
--- a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/moon/etc/strongswan.conf
index 178fa2e7c1..ac2763e4b4 100644
--- a/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/rw-hash-and-url/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/skipped/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/skipped/hosts/carol/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/skipped/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/skipped/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2-multi-ca/skipped/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2-multi-ca/skipped/hosts/moon/etc/strongswan.conf
index f3b571a1b4..1379a82b05 100644
--- a/testing/tests/ikev2-multi-ca/skipped/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2-multi-ca/skipped/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf
index 3e621eda27..c0d9ea156f 100755
--- a/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-cached/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf
index 3e621eda27..c0d9ea156f 100755
--- a/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-cached/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf
index 38c046b3f5..5cf322fb11 100755
--- a/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-cached/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf
index d4b29a3680..725e8bf27c 100644
--- a/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-fallback/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf
index 5f62c0bba2..50aec7beb5 100644
--- a/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-fallback/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf
index 3e621eda27..c0d9ea156f 100755
--- a/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-inline/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf
index 3e621eda27..c0d9ea156f 100755
--- a/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-inline/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf
index 38c046b3f5..5cf322fb11 100755
--- a/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/acert-inline/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/after-2038-certs/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/after-2038-certs/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/config-payload/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/config-payload/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/config-payload/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf
index 799d083d65..0d99e2edeb 100644
--- a/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-from-cache/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf
index c667f5394b..f5e561c99f 100644
--- a/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-from-cache/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf
index 9366fc0b9b..12b3d3688d 100644
--- a/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-ldap/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf
index 9366fc0b9b..12b3d3688d 100644
--- a/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-ldap/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf
index 799d083d65..0d99e2edeb 100644
--- a/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-revoked/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf
index 799d083d65..0d99e2edeb 100644
--- a/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-revoked/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf
index c667f5394b..f5e561c99f 100644
--- a/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-to-cache/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf
index c667f5394b..f5e561c99f 100644
--- a/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/crl-to-cache/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-dynamic/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-dynamic/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf
index 8fdb4af9d7..fbda461d40 100755
--- a/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-dynamic/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf
index 83866002d0..f7e010780b 100755
--- a/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-client-id/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-mac/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100755
--- a/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-mac/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf
index 83866002d0..f7e010780b 100755
--- a/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/dhcp-static-mac/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/dynamic-initiator/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/dynamic-initiator/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/dynamic-initiator/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/farp/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/farp/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf
index ec7173d045..a8c465ef8d 100755
--- a/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/farp/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf
index fe624ca0d5..bf7f058452 100755
--- a/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-ah/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf
index fe624ca0d5..bf7f058452 100755
--- a/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-ah/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-transport-nat/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-transport-nat/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-transport-nat/hosts/venus/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-transport/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/host2host-transport/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf
index 8df41f29db..acb891168d 100755
--- a/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool-db/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf
index 8df41f29db..acb891168d 100755
--- a/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool-db/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf
index d565d55ade..e69dfff1fc 100755
--- a/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool-db/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-pool/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf
index f34a55baf5..e8540b6648 100755
--- a/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-split-pools-db/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf
index f34a55baf5..e8540b6648 100755
--- a/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-split-pools-db/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf
index 7424453a6c..c6419de053 100755
--- a/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-split-pools-db/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-db/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-db/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-db/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf
index b0367540cb..ccb69cf95a 100755
--- a/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-db/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf
index 43df767169..b764dba9a1 100755
--- a/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-db/hosts/venus/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf
index b0367540cb..ccb69cf95a 100755
--- a/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-mixed/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf
index f34a55baf5..e8540b6648 100755
--- a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf
index 9a9b4ba7c7..7626af7e01 100755
--- a/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-v4v6-db/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf
index f34a55baf5..e8540b6648 100755
--- a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf
index f34a55baf5..e8540b6648 100755
--- a/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools-v4v6/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ip-two-pools/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/lookip/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/lookip/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf
index 289fa06ab1..3a0d5c5f1e 100644
--- a/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/lookip/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-nat-mappings/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-nat-mappings/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf
index 59c9e64679..0b57aedcfe 100644
--- a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf
index a8cd44c9a7..a062205eb3 100644
--- a/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-virtual-ip-nat/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-virtual-ip/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike-virtual-ip/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf b/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike/hosts/alice/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf
index 69f5f7a19a..7b4ffcf7dc 100644
--- a/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/mobike/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/nat-virtual-ip/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/nat-virtual-ip/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-ah/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-ah/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-cert-sha2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-cert-sha2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-childless/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-childless/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf
index d0eb2288d5..bcd29c960a 100644
--- a/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dnscert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf
index d0eb2288d5..bcd29c960a 100644
--- a/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dnscert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf
index f98ba17b4e..2089a4d180 100755
--- a/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dnssec/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf
index f98ba17b4e..2089a4d180 100755
--- a/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dnssec/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf
index 7bec6840bc..423248cb90 100644
--- a/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dscp/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf
index 777eefd896..57e500cab0 100644
--- a/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-dscp/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf
index 59b67b8283..8d508ac9e2 100755
--- a/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-ed25519/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 pkcs8 revocation constraints
+ swanctl {
+  load = random pem pkcs1 pkcs8
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf
index 59b67b8283..8d508ac9e2 100755
--- a/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-ed25519/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 pkcs8 revocation constraints
+ swanctl {
+  load = random pem pkcs1 pkcs8
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-esn/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-esn/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-gw/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-gw/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-gw/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-iptfs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-iptfs/hosts/moon/etc/strongswan.conf
index e9a7590b2c..4de2a04ba7 100755
--- a/testing/tests/ikev2/net2net-iptfs/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-iptfs/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-iptfs/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-iptfs/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-iptfs/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-iptfs/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf
index b3cfb07a53..3bf7e1cf6a 100644
--- a/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-multicast/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf
index 9cd431b485..9756b75ca3 100755
--- a/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-pkcs12/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf
index 9cd431b485..9756b75ca3 100755
--- a/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-pkcs12/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-psk-fail/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-psk-fail/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-psk/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-psk/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf
index 8ed394818b..a018079213 100644
--- a/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-rekey/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100644
--- a/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-rekey/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf
index 0f249edfd6..1ef27f4390 100755
--- a/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-rfc3779/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf
index 0f249edfd6..1ef27f4390 100755
--- a/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-rfc3779/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-route-narrow/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-route-narrow/hosts/moon/etc/strongswan.conf
index 091aea5098..230fe43d4e 100755
--- a/testing/tests/ikev2/net2net-route-narrow/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-route-narrow/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-route-narrow/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-route-narrow/hosts/sun/etc/strongswan.conf
index 5b930b77da..1d6008b66f 100755
--- a/testing/tests/ikev2/net2net-route-narrow/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-route-narrow/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-route/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf
index 05b62a1b7d..b286fbe237 100755
--- a/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-route/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
index 1d4221c46e..29bae6869a 100755
--- a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints pubkey
+ swanctl {
+  load = random pem pkcs1 openssl pubkey
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
index 1d4221c46e..29bae6869a 100755
--- a/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints pubkey
+ swanctl {
+  load = random pem pkcs1 openssl pubkey
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-start/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/net2net-start/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-no-signer-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-revoked/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-revoked/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-root-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf
index 3b9a9b3797..d269b49271 100644
--- a/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/ocsp-root-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/moon/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/sun/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas-encap-transport/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas-encap/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas-encap/hosts/moon/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas-encap/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas-encap/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas-encap/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas-encap/hosts/sun/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas-encap/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas-encap/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas/hosts/moon/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/per-cpu-sas/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/per-cpu-sas/hosts/sun/etc/strongswan.conf
index 8af0dabb29..492385f0b7 100755
--- a/testing/tests/ikev2/per-cpu-sas/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/per-cpu-sas/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf
index 1c42fbb6d6..7c0e2bb28a 100644
--- a/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb-revoked/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf
index 592135a35e..6300c35b15 100644
--- a/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb-revoked/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf
index 1c42fbb6d6..7c0e2bb28a 100644
--- a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf
index 592135a35e..6300c35b15 100644
--- a/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb-virtual-ip/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf
index 1c42fbb6d6..7c0e2bb28a 100644
--- a/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf
index 592135a35e..6300c35b15 100644
--- a/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/reauth-mbb/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf
index d6e3525d2c..c4ba1ac799 100755
--- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf
index d6e3525d2c..c4ba1ac799 100755
--- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf
index d6e3525d2c..c4ba1ac799 100755
--- a/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-multi-ke/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-ppk/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-ppk/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-ppk/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf
index 3bb0881f04..1d2e2c56ca 100755
--- a/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-pss/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf
index 3bb0881f04..1d2e2c56ca 100755
--- a/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-pss/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf
index 7aed328efd..61f2f859fe 100755
--- a/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert-pss/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf
index a5f3306196..5588a8bc55 100755
--- a/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf
index a5f3306196..5588a8bc55 100755
--- a/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf
index 96b166dbb2..4691c234d2 100755
--- a/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf
index d5de6fc942..19e2a0804f 100644
--- a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf
index d5de6fc942..19e2a0804f 100644
--- a/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-id-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf
index 99d707498f..fd3e35192e 100644
--- a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf
index 99d707498f..fd3e35192e 100644
--- a/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf
index ef688b5bc6..439e5dbde0 100644
--- a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf
index ef688b5bc6..439e5dbde0 100644
--- a/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-aka-sql-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf
index 94afaec354..45af1efced 100644
--- a/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf
index 6957104026..39c089431b 100644
--- a/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf
index 5cb6510fad..66ca59e162 100644
--- a/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-dynamic/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf
index 49744e6a0d..3dfffd62d7 100644
--- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf
index 984223f5a3..d9f36eed7b 100644
--- a/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-framed-ip-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-id-switch/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-id-switch/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-id-switch/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-id-switch/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-id-switch/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-id-switch/hosts/dave/etc/strongswan.conf
index 0ac5d700eb..3b99161e62 100644
--- a/testing/tests/ikev2/rw-eap-id-switch/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-id-switch/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-id-switch/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-id-switch/hosts/moon/etc/strongswan.conf
index 8b74972874..9dfc73b39b 100644
--- a/testing/tests/ikev2/rw-eap-id-switch/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-id-switch/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf
index 717ce62d54..564a85635e 100644
--- a/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-class-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf
index 984223f5a3..d9f36eed7b 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-rsa-ppk/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-id-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf
index 94afaec354..45af1efced 100644
--- a/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf
index 94afaec354..45af1efced 100644
--- a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf
index 94afaec354..45af1efced 100644
--- a/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-md5-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf
index 9493ed75c4..c9797d039a 100644
--- a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf
index 9493ed75c4..c9797d039a 100644
--- a/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-mschapv2-id-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf
index 808f6e692c..5f0bd415ba 100644
--- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf
index edaab97986..6b122a3153 100644
--- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf
index cd4e34585f..f306bf07fc 100644
--- a/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-md5/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf
index 95e7f68ec3..84ba51cde7 100644
--- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf
index d2c4f8def1..ffa66baea5 100644
--- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf
index cea42c44ff..448596ce0e 100644
--- a/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-mschapv2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf
index 49744e6a0d..3dfffd62d7 100644
--- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf
index 49744e6a0d..3dfffd62d7 100644
--- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-peap-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf
index 2447613831..01501a9a5b 100644
--- a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf
index 984223f5a3..d9f36eed7b 100644
--- a/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-id-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-only-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf
index e6f68dc968..63f9398b5a 100644
--- a/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-sim-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf
index 80282acc11..0b9c0d0568 100644
--- a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf
index 21cdc28b86..1f6b4efa50 100644
--- a/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-fragments/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf
index 15a9a2352c..19db078910 100644
--- a/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf
index 09f23a45a0..b04706f308 100644
--- a/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf
index a20e0a1168..9d7cc9ce10 100644
--- a/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-only/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf
index 371c8fb14d..0ad46913db 100644
--- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf
index 88d4c082dd..ac981affcd 100755
--- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints pubkey
+ swanctl {
+  load = random pem pkcs1 openssl pubkey
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf
index 9756191a09..7c2e4c7d7c 100755
--- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints pubkey
+ swanctl {
+  load = random pem pkcs1 openssl pubkey
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf
index e9b033f4bf..db102625ad 100755
--- a/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-tls-sha3-rsa/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints pubkey
+ swanctl {
+  load = random pem pkcs1 openssl pubkey
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf
index d41cf7d680..b044efbdc4 100644
--- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf
index 5d7c3967fe..ace2746795 100644
--- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf
index c9a7e6e786..28fa98900d 100644
--- a/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-only/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf
index 15652a812e..b0e1ef454b 100644
--- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf
index 15652a812e..b0e1ef454b 100644
--- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf
index e93de3b661..80fc25b618 100644
--- a/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-eap-ttls-radius/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf
index 992dad8f79..6898571a6b 100755
--- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pkcs8 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf
index 992dad8f79..6898571a6b 100755
--- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pkcs8 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf
index df294067a5..34709cc3d4 100755
--- a/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-ed25519-certpol/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 pkcs8 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pkcs8 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf
index addd558392..ba52182026 100755
--- a/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-hash-and-url/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf
index addd558392..ba52182026 100755
--- a/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-hash-and-url/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf
index addd558392..ba52182026 100755
--- a/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-hash-and-url/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf
index 9187d8426a..b1d5457595 100755
--- a/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-initiator-only/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-initiator-only/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-initiator-only/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-mlkem/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-mlkem/hosts/carol/etc/strongswan.conf
index 2420570340..cf469cbd9c 100755
--- a/testing/tests/ikev2/rw-mlkem/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-mlkem/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-mlkem/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-mlkem/hosts/dave/etc/strongswan.conf
index 05c013396f..577a43f0e9 100755
--- a/testing/tests/ikev2/rw-mlkem/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-mlkem/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-mlkem/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-mlkem/hosts/moon/etc/strongswan.conf
index 2420570340..cf469cbd9c 100755
--- a/testing/tests/ikev2/rw-mlkem/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-mlkem/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf
index 9cd431b485..9756b75ca3 100755
--- a/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-pkcs8/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf
index 9cd431b485..9756b75ca3 100755
--- a/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-pkcs8/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf
index 9cd431b485..9756b75ca3 100755
--- a/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-pkcs8/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf
index 2bc6477622..642780ca73 100755
--- a/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-pubkey-anon/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf
index 2bc6477622..642780ca73 100755
--- a/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-pubkey-keyid/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf
index 30536f744a..7483f76001 100644
--- a/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-radius-accounting/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf
index 2f77c207ea..820736abce 100644
--- a/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-radius-accounting/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100755
--- a/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-sig-auth/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100755
--- a/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-sig-auth/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100755
--- a/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-sig-auth/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-whitelist/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-whitelist/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf
index 422e177a04..27cbd6f96f 100755
--- a/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/rw-whitelist/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/shunt-manual-prio/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/shunt-manual-prio/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/shunt-manual-prio/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100755
--- a/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/strong-keys-certs/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf
index a5f3306196..5588a8bc55 100755
--- a/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/strong-keys-certs/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100755
--- a/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/strong-keys-certs/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf
index 7bec6840bc..423248cb90 100644
--- a/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/trap-any/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf
index 7bec6840bc..423248cb90 100644
--- a/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/trap-any/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf
index 7bec6840bc..423248cb90 100644
--- a/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/trap-any/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf b/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf
index 7bec6840bc..423248cb90 100644
--- a/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ikev2/trap-any/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf
index 733d0b3c26..526b85de36 100644
--- a/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/two-certs/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf
index 733d0b3c26..526b85de36 100644
--- a/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/two-certs/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf
index 8f7cb5852d..62ce1003a7 100755
--- a/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ikev2/wildcards/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf
index 8f7cb5852d..62ce1003a7 100755
--- a/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ikev2/wildcards/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf b/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf
index 592135a35e..6300c35b15 100755
--- a/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ikev2/wildcards/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/host2host-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/host2host-ikev1/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/host2host-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/host2host-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ikev1/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev1/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf
index 581a7a412f..f2e9b747eb 100644
--- a/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip4-in-ip6-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
index 6d5221eee8..3a10718693 100644
--- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf
index 6d5221eee8..3a10718693 100644
--- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev1/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
index 6d5221eee8..3a10718693 100644
--- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf
index 6d5221eee8..3a10718693 100644
--- a/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-ip6-in-ip4-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
index 3fe53f0428..91753176a5 100644
--- a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf
index 3fe53f0428..91753176a5 100644
--- a/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/net2net-rfc3779-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-compress-ikev2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-compress-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev1/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev1/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev2/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-ip6-in-ip4-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf
index c746f3c654..f85391ae6b 100644
--- a/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-psk-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf
index 3fe53f0428..91753176a5 100644
--- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf
index 3fe53f0428..91753176a5 100644
--- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
index 3fe53f0428..91753176a5 100644
--- a/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/rw-rfc3779-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/transport-ikev1/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/transport-ikev1/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/ipv6/transport-ikev2/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf b/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/ipv6/transport-ikev2/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf
index 9ff1eb85bc..149b7b6a3e 100644
--- a/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/host2host-cert-raw/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf
index 9ff1eb85bc..149b7b6a3e 100644
--- a/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/host2host-cert-raw/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf
index 9adf2aa998..7c6e7f714b 100644
--- a/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/host2host-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf
index 9adf2aa998..7c6e7f714b 100644
--- a/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/host2host-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-3des/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-3des/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf
index 5304b76e47..1d5de9cb69 100644
--- a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf
index 5304b76e47..1d5de9cb69 100644
--- a/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip4/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf
index 734f05b5fc..8c54fac7e9 100644
--- a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf
index 734f05b5fc..8c54fac7e9 100644
--- a/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-ip6-in-ip6-raw/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf
index 734f05b5fc..8c54fac7e9 100644
--- a/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-raw/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf
index 734f05b5fc..8c54fac7e9 100644
--- a/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert-raw/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf
index 23cdf9acb4..02145f8336 100644
--- a/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-null/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf
index 23cdf9acb4..02145f8336 100644
--- a/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-null/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf b/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-trap/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf b/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf
index c98c6731ea..f4af22adec 100644
--- a/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/libipsec/net2net-trap/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-gre/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-gre/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-vti/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-vti/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi-ike/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf
index 17d28dd469..5651c7bf4b 100644
--- a/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi-ike/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi-netns/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi-netns/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf b/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/route-based/net2net-xfrmi/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti-ip6-in-ip4/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf
index ecfacd2dd8..0f718f3b1d 100644
--- a/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-vti/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf
index 5ac39a3371..203f1a7b9d 100755
--- a/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf b/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf
index 5292ed0711..e9cb98b76b 100644
--- a/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/route-based/rw-shared-xfrmi/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf
index 6741344843..3155003881 100644
--- a/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/host2host-initiator/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

 swanctl {
-  load = pem pkcs1 openssl revocation random
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/host2host-responder/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/host2host-xfrmproxy/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf b/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/tkm/multiple-clients/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf b/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/tkm/multiple-clients/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/net2net-initiator/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/net2net-xfrmproxy/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/xfrmproxy-expire/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf b/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf
index 6741344843..93762cf24a 100644
--- a/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/tkm/xfrmproxy-rekey/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 openssl revocation random
+ swanctl {
+  load = pem pkcs1 openssl random
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/net2net-ed25519/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/net2net-ed25519/hosts/moon/etc/strongswan.conf
index 3c7664b301..0738143bb6 100755
--- a/testing/tests/wolfssl/net2net-ed25519/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/net2net-ed25519/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem wolfssl x509 revocation constraints
+ swanctl {
+  load = random pem wolfssl x509
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf b/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf
index f0c7480ca3..c63c40ab95 100755
--- a/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/wolfssl/net2net-ed25519/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = random pem pkcs1 openssl revocation constraints
+ swanctl {
+  load = random pem pkcs1 openssl
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
index c18b002fd2..382df8358b 100755
--- a/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkeyrandom
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkeyrandom
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf b/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
index ea977a3916..c8ce47a52e 100755
--- a/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
+++ b/testing/tests/wolfssl/net2net-sha3-rsa-cert/hosts/sun/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey random
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey random
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-cert/hosts/carol/etc/strongswan.conf b/testing/tests/wolfssl/rw-cert/hosts/carol/etc/strongswan.conf
index eccb2d37ab..32a5148f95 100755
--- a/testing/tests/wolfssl/rw-cert/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-cert/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl x509 revocation constraints pkcs1 pubkey
+ swanctl {
+  load = pem wolfssl x509 pkcs1 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf
index 924fc90dc4..6a8c6ac159 100755
--- a/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-cert/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pkcs1 pem openssl revocation constraints
+ swanctl {
+  load = pkcs1 pem openssl
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-cert/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/rw-cert/hosts/moon/etc/strongswan.conf
index 093f4a201d..564ac942a5 100755
--- a/testing/tests/wolfssl/rw-cert/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-cert/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl x509 revocation constraints pkcs1 pubkey
+ swanctl {
+  load = pem wolfssl x509 pkcs1 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-ecp256/hosts/carol/etc/strongswan.conf b/testing/tests/wolfssl/rw-ecp256/hosts/carol/etc/strongswan.conf
index 72624afbf1..6af47fb53b 100755
--- a/testing/tests/wolfssl/rw-ecp256/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-ecp256/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-ecp256/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-ecp256/hosts/dave/etc/strongswan.conf
index 3ee76327ce..0830ac034b 100755
--- a/testing/tests/wolfssl/rw-ecp256/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-ecp256/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-ecp256/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/rw-ecp256/hosts/moon/etc/strongswan.conf
index 87af233ea7..dfad35cbb0 100755
--- a/testing/tests/wolfssl/rw-ecp256/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-ecp256/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-mlkem/hosts/carol/etc/strongswan.conf b/testing/tests/wolfssl/rw-mlkem/hosts/carol/etc/strongswan.conf
index 72624afbf1..6af47fb53b 100755
--- a/testing/tests/wolfssl/rw-mlkem/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-mlkem/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-mlkem/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-mlkem/hosts/dave/etc/strongswan.conf
index ec27c324d2..3467fa3aca 100755
--- a/testing/tests/wolfssl/rw-mlkem/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-mlkem/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 x509 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 x509 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-mlkem/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/rw-mlkem/hosts/moon/etc/strongswan.conf
index 72624afbf1..6af47fb53b 100755
--- a/testing/tests/wolfssl/rw-mlkem/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-mlkem/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-modp3072/hosts/carol/etc/strongswan.conf b/testing/tests/wolfssl/rw-modp3072/hosts/carol/etc/strongswan.conf
index 72624afbf1..6af47fb53b 100755
--- a/testing/tests/wolfssl/rw-modp3072/hosts/carol/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-modp3072/hosts/carol/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf b/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf
index 033ea6b297..70f12a9ca5 100755
--- a/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-modp3072/hosts/dave/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem pkcs1 revocation constraints pubkey openssl random
+ swanctl {
+  load = pem pkcs1 pubkey openssl random
 }

 charon-systemd {
diff --git a/testing/tests/wolfssl/rw-modp3072/hosts/moon/etc/strongswan.conf b/testing/tests/wolfssl/rw-modp3072/hosts/moon/etc/strongswan.conf
index 87af233ea7..dfad35cbb0 100755
--- a/testing/tests/wolfssl/rw-modp3072/hosts/moon/etc/strongswan.conf
+++ b/testing/tests/wolfssl/rw-modp3072/hosts/moon/etc/strongswan.conf
@@ -1,7 +1,7 @@
 # /etc/strongswan.conf - strongSwan configuration file

-swanctl {
-  load = pem wolfssl pkcs1 x509 revocation constraints pubkey
+ swanctl {
+  load = pem wolfssl pkcs1 x509 pubkey
 }

 charon-systemd {