[Openswan Users] Openswan 2.6.21+ support for OCSP

[Gupta, Deepak (Deepak)]

Paul,

I do see an option to pluto [--ocspuri] which indicates that we may be able to speicify this in ipsec.conf (even though this is not listed as an option in ipsec.conf).  Could you please clarify the extent of support for ocsp in 2.6, it would greatly help.

Many thanks in advance,

-Deepak
 

-----Original Message-----
From: Gupta, Deepak (Deepak) 
Sent: Monday, November 09, 2009 10:48 AM
To: 'users at openswan.org'
Subject: Openswan 2.6.21+ support for OCSP

 
Paul,

I have installed openswan 2.6.21 on an RHEL 5 system and I am trying to configure support for CA including support for OCSP (over http) to retrieve CRL's.  Via google I see some of your old email threads regarding adding support for OCSP to openswan, but I am not sure if the support for this exists.  I see some other threads where folks are referring to ipsec.conf options such as ocspuri and ocspuri2 etc., including a thread recently on this list.  Is this feature supported?  And if so, where can we see all the options that can be set in ipsec.conf?

Thanks,

-Deepak