summaryrefslogtreecommitdiff
path: root/openvpn/README.polarssl
diff options
context:
space:
mode:
authorArne Schwabe <arne@rfc2549.org>2012-04-16 19:21:14 +0200
committerArne Schwabe <arne@rfc2549.org>2012-04-16 19:21:14 +0200
commit3e4d8f433239c40311037616b1b8833a06651ae0 (patch)
tree98ab7fce0d011d34677b0beb762d389cb5c39199 /openvpn/README.polarssl
Initial import
Diffstat (limited to 'openvpn/README.polarssl')
-rw-r--r--openvpn/README.polarssl28
1 files changed, 28 insertions, 0 deletions
diff --git a/openvpn/README.polarssl b/openvpn/README.polarssl
new file mode 100644
index 0000000..77a9575
--- /dev/null
+++ b/openvpn/README.polarssl
@@ -0,0 +1,28 @@
+This version of OpenVPN has PolarSSL support. To enable follow the following
+instructions:
+
+To Build and Install,
+
+ ./configure --with-ssl-type=polarssl
+ make
+ make install
+
+This version depends on at least PolarSSL v0.99.
+
+*************************************************************************
+
+Due to limitations in the PolarSSL library, the following features are missing
+in the PolarSSL version of OpenVPN:
+
+ * PKCS#12 file support
+ * --capath support - Loading certificate authorities from a directory
+ * Windows CryptoAPI support
+ * Management external key support
+ * X.509 alternative username fields (must be "CN")
+
+Plugin/Script features:
+
+ * X.509 Serial number is in hex, not decimal as with OpenSSL
+ * X.509 subject line has a different format than the OpenSSL subject line
+ * X.509 certificate export does not work
+ * X.509 certificate tracking