= Introduction =

PolarSSL support is fully integrated with mainline OpenVPN since 2.3. Status of the integration is viewable from [wiki:PolarSSLintegration this page]. 

= Limitations compared to OpenSSL =

Author of the patchset [http://sourceforge.net/mailarchive/message.php?msg_id=27751181 said] the following:

{{{
Note that due to limitations in PolarSSL, it is still missing a number of features:

 * PKCS#12 file support
 * --capath support - Loading certificate authorities from a directory
 * Windows CryptoAPI support
 * Management external key support
 * X.509 alternative username fields (must be "CN")

Plugin/Script features:

 * X.509 Serial number is in hex, not decimal as with OpenSSL
 * X.509 subject line has a different format than the OpenSSL subject line
 * X.509 certificate export does not work
 * X.509 certificate tracking
}}}

Latest [https://github.com/andj/openvpn-ssl-refactoring/blob/f543aafc52d8885c36ced7bf0eb74919dc6bb75f/README.polarssl README.polarssl] may contain more recent information.

= Getting the PolarSSL-enabled OpenVPN =

OpenVPN 2.3 has full PolarSSL support.