Changes between Version 4 and Version 5 of UsingPolarSSL

Timestamp:

07/21/14 11:18:03 (10 years ago)

Author:

Steffan Karger

Comment:

Make page up-to-date, remove duplicate information (and refer to README.polarssl instead).

UsingPolarSSL

@@ -1 +1 @@
 = Introduction =
 
-PolarSSL support is fully integrated with mainline OpenVPN since 2.3. Status of the integration is viewable from [wiki:PolarSSLintegration this page]. 
+Since version 2.3, OpenVPN can be built using PolarSSL as it's crypto backend, instead of OpenSSL. See [https://polarssl.org/] for more information on PolarSSL.
 
 = Limitations compared to OpenSSL =
 
-Author of the patchset [http://sourceforge.net/mailarchive/message.php?msg_id=27751181 said] the following:
+Note that the PolarSSL variant of OpenVPN does not support the same featureset as the OpenSSL variant. The most prominent differences are listed in the latest [https://github.com/OpenVPN/openvpn/blob/master/README.polarssl README.polarssl].
 
+= Building the PolarSSL-enabled OpenVPN =
+
+OpenVPN 2.3 has full PolarSSL support. Get the sources from [http://openvpn.net/index.php/open-source/downloads.html the download page], or get the most recent (potentially unstable) code [https://github.com/OpenVPN/openvpn from github].
+
+To build using polarssl:
 {{{
-Note that due to limitations in PolarSSL, it is still missing a number of features:
-
- * PKCS#12 file support
- * --capath support - Loading certificate authorities from a directory
- * Windows CryptoAPI support
- * Management external key support
- * X.509 alternative username fields (must be "CN")
-
-Plugin/Script features:
-
- * X.509 Serial number is in hex, not decimal as with OpenSSL
- * X.509 subject line has a different format than the OpenSSL subject line
- * X.509 certificate export does not work
- * X.509 certificate tracking
+./configure --with-crypto-library=polarssl
+make
+make install
 }}}
 
-Latest [https://github.com/andj/openvpn-ssl-refactoring/blob/f543aafc52d8885c36ced7bf0eb74919dc6bb75f/README.polarssl README.polarssl] may contain more recent information.
-
-= Getting the PolarSSL-enabled OpenVPN =
-
-OpenVPN 2.3 has full PolarSSL support.
-
-{{{
-./configure --with-ssl-type=polarssl
-        make
-        make install
-}}}
-