diff -Naur libreswan-3.15-orig/programs/configs/d.ipsec.conf/strictcrlpolicy.xml libreswan-3.15/programs/configs/d.ipsec.conf/strictcrlpolicy.xml
--- libreswan-3.15-orig/programs/configs/d.ipsec.conf/strictcrlpolicy.xml	2015-08-25 05:28:32.000000000 +0300
+++ libreswan-3.15/programs/configs/d.ipsec.conf/strictcrlpolicy.xml	2016-07-02 23:35:49.908711469 +0300
@@ -1,5 +1,5 @@
   <varlistentry>
-  <term><emphasis remap='B'>strictcrlpolicy</emphasis></term>
+  <term><emphasis remap='B'>crl-strict</emphasis></term>
   <listitem>
 <para>if not set, pluto is tolerant about missing or expired X.509 Certificate
 Revocation Lists (CRL's), and will allow peer certificates as long as they
@@ -10,7 +10,7 @@
 entire VPN server will be dead in the water until a new CRL is manually
 transferred to the machine (if it allows non-IPsec connections).
 Acceptable values are <emphasis remap='B'>yes</emphasis> or <emphasis remap='B'>no</emphasis>
-(the default).
+(the default). This option used to be called <emphasis remap='B'>strictcrlpolicy=</emphasis>
 </para>
   </listitem>
   </varlistentry>