[Openvpn-devel] PolarSSL patches

Hi everyone,

During last week's meeting we decided to temporarily create a github tree for OpenVPN. It can be found at https://github.com/andj/openvpn-ssl-refactoring . The version found there is now ready for testing, and will (hopefully) be included in the 2.3 alpha versions.

Could interested parties please have a look and provide me with feedback (through IRC/e-mail?).

Thanks!

Adriaan de Jong

PS. Note that due to limitations in PolarSSL, it is still missing a number of features:

 * PKCS#12 file support
 * --capath support - Loading certificate authorities from a directory
 * Windows CryptoAPI support
 * Management external key support
 * X.509 alternative username fields (must be "CN")

Plugin/Script features:

 * X.509 Serial number is in hex, not decimal as with OpenSSL
 * X.509 subject line has a different format than the OpenSSL subject line
 * X.509 certificate export does not work
 * X.509 certificate tracking

Fox-IT    ...for a more secure society
I www.fox-it.com<http://www.fox-it.com/>