From 8dd0350e1607aa30f7a043c8d5ec7a7eeb874115 Mon Sep 17 00:00:00 2001 From: Alberto Gonzalez Iniesta Date: Mon, 5 Nov 2012 16:28:09 +0100 Subject: Imported Upstream version 2.3_rc1 --- README.polarssl | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 README.polarssl (limited to 'README.polarssl') diff --git a/README.polarssl b/README.polarssl new file mode 100644 index 0000000..ab7c2d7 --- /dev/null +++ b/README.polarssl @@ -0,0 +1,28 @@ +This version of OpenVPN has PolarSSL support. To enable follow the following +instructions: + +To Build and Install, + + ./configure --with-crypto-library=polarssl + make + make install + +This version depends on at least PolarSSL v1.1. + +************************************************************************* + +Due to limitations in the PolarSSL library, the following features are missing +in the PolarSSL version of OpenVPN: + + * PKCS#12 file support + * --capath support - Loading certificate authorities from a directory + * Windows CryptoAPI support + * Management external key support + * X.509 alternative username fields (must be "CN") + +Plugin/Script features: + + * X.509 Serial number is in hex, not decimal as with OpenSSL + * X.509 subject line has a different format than the OpenSSL subject line + * X.509 certificate export does not work + * X.509 certificate tracking -- cgit v1.2.3