Hello all, I hope I did not miss the answer to this in other sources. To reload the crl I think I need to restart ipsec. Is this correct? what happens to existing connections if I issue: # /etc/init.d/ipsec restart