2011-07-01 20:15:11 +08:00
|
|
|
This version of OpenVPN has PolarSSL support. To enable follow the following
|
|
|
|
|
instructions:
|
|
|
|
|
|
|
|
|
|
To Build and Install,
|
|
|
|
|
|
2012-04-02 15:28:07 +08:00
|
|
|
./configure --with-crypto-library=polarssl
|
2011-07-01 20:15:11 +08:00
|
|
|
make
|
|
|
|
|
make install
|
|
|
|
|
|
2014-06-25 04:03:26 +08:00
|
|
|
This version depends on PolarSSL 1.3 (and requires at least 1.3.3).
|
2011-07-05 19:09:13 +08:00
|
|
|
|
2011-07-01 20:15:11 +08:00
|
|
|
*************************************************************************
|
|
|
|
|
|
2011-07-05 19:09:13 +08:00
|
|
|
Due to limitations in the PolarSSL library, the following features are missing
|
|
|
|
|
in the PolarSSL version of OpenVPN:
|
2011-07-01 20:15:11 +08:00
|
|
|
|
|
|
|
|
* PKCS#12 file support
|
2011-07-05 19:09:13 +08:00
|
|
|
* --capath support - Loading certificate authorities from a directory
|
2011-07-01 20:15:11 +08:00
|
|
|
* Windows CryptoAPI support
|
2011-07-05 19:09:13 +08:00
|
|
|
* X.509 alternative username fields (must be "CN")
|
|
|
|
|
|
|
|
|
|
Plugin/Script features:
|
2011-07-01 20:15:11 +08:00
|
|
|
|
2011-07-05 19:09:13 +08:00
|
|
|
* X.509 subject line has a different format than the OpenSSL subject line
|
|
|
|
|
* X.509 certificate export does not work
|
|
|
|
|
* X.509 certificate tracking
|
