summaryrefslogtreecommitdiff
path: root/ics-openvpn-stripped/main/openvpn/README.polarssl
diff options
context:
space:
mode:
Diffstat (limited to 'ics-openvpn-stripped/main/openvpn/README.polarssl')
-rw-r--r--ics-openvpn-stripped/main/openvpn/README.polarssl26
1 files changed, 26 insertions, 0 deletions
diff --git a/ics-openvpn-stripped/main/openvpn/README.polarssl b/ics-openvpn-stripped/main/openvpn/README.polarssl
new file mode 100644
index 00000000..6f1fa51a
--- /dev/null
+++ b/ics-openvpn-stripped/main/openvpn/README.polarssl
@@ -0,0 +1,26 @@
+This version of OpenVPN has PolarSSL support. To enable follow the following
+instructions:
+
+To Build and Install,
+
+ ./configure --with-crypto-library=polarssl
+ make
+ make install
+
+This version depends on PolarSSL 1.3 (and requires at least 1.3.3).
+
+*************************************************************************
+
+Due to limitations in the PolarSSL library, the following features are missing
+in the PolarSSL version of OpenVPN:
+
+ * PKCS#12 file support
+ * --capath support - Loading certificate authorities from a directory
+ * Windows CryptoAPI support
+ * X.509 alternative username fields (must be "CN")
+
+Plugin/Script features:
+
+ * X.509 subject line has a different format than the OpenSSL subject line
+ * X.509 certificate export does not work
+ * X.509 certificate tracking