[Openswan Users] ocsp & openswan

[Andreas Steffen]

david wrote:
> 2005/6/15, Paul Wouters <paul at xelerance.com>:
> 
>>On Wed, 15 Jun 2005, david wrote:
>>
>>
>>>2)I tryed to put the following on both ends :
>>>ca openswan
>>>      cacert=ca.crt
>>>      ocspuri=http://195.212.109.202:8888
>>>      auto=add
>>
>>What version of openswan is this? I thought this was
>>already ported, but perhaps that part of Andreas' patch
>>has not been merged in yet, due to the low demand for
>>OCSP so far.
>>
>>Paul
>>
> 
> 
> I am using openswan-2.3.1
> why OCSP has a low demand ?

Most people don't even use CRLs ;-)

If you want a working OCSP solution then switch to strongSwan found at

   http://www.strongswan.org

Regards

Andreas

=======================================================================
Andreas Steffen                   e-mail: andreas.steffen at strongsec.com
strongSec GmbH                    home:   http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64
CH-8952 Schlieren (Switzerland)   fax:    +41 1 730 80 65
==========================================[strong internet security]===