[strongSwan] OSCP

Modster, Anthony Anthony.Modster at Teledyne.com
Mon Dec 18 18:38:01 CET 2017

Hello Andreas

If the OCSP URI is included in the authorityInfoAccess extension:

? How does strongswan obtain the IP address

? Does it need to have a DNS client installed on the host

? Can it support secure DNS


-----Original Message-----
From: Users [mailto:users-bounces at lists.strongswan.org] On Behalf Of Andreas Steffen
Sent: Saturday, December 16, 2017 2:23 AM
To: Modster, Anthony <Anthony.Modster at Teledyne.com>; users at lists.strongswan.org
Subject: Re: [strongSwan] OSCP

Hello Anthony,

if the OCSP URI is not included via an authorityInfoAccess extension in
the end entity certificate itself then an authority section defining an
OCSP URI can be added to swanctl.conf as shown in the link below




On 16.12.2017 00:56, Modster, Anthony wrote:
> Hello
> ? how do we setup OSCP, when using VICI
> Is there a writeup for this item.
> ? what support tools are needed on the host
> Thanks

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Networked Solutions
HSR University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

More information about the Users mailing list