From 3e4d8f433239c40311037616b1b8833a06651ae0 Mon Sep 17 00:00:00 2001 From: Arne Schwabe Date: Mon, 16 Apr 2012 19:21:14 +0200 Subject: Initial import --- openvpn/README.polarssl | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 openvpn/README.polarssl (limited to 'openvpn/README.polarssl') diff --git a/openvpn/README.polarssl b/openvpn/README.polarssl new file mode 100644 index 00000000..77a95750 --- /dev/null +++ b/openvpn/README.polarssl @@ -0,0 +1,28 @@ +This version of OpenVPN has PolarSSL support. To enable follow the following +instructions: + +To Build and Install, + + ./configure --with-ssl-type=polarssl + make + make install + +This version depends on at least PolarSSL v0.99. + +************************************************************************* + +Due to limitations in the PolarSSL library, the following features are missing +in the PolarSSL version of OpenVPN: + + * PKCS#12 file support + * --capath support - Loading certificate authorities from a directory + * Windows CryptoAPI support + * Management external key support + * X.509 alternative username fields (must be "CN") + +Plugin/Script features: + + * X.509 Serial number is in hex, not decimal as with OpenSSL + * X.509 subject line has a different format than the OpenSSL subject line + * X.509 certificate export does not work + * X.509 certificate tracking -- cgit v1.2.3