[strongSwan] strongSwan plugins - openssl and x509

divya mohan m.divya.mohan at zoho.com
Wed Jul 11 11:08:31 CEST 2018


Hello,

I found the below documentation at
https://wiki.strongswan.org/projects/strongswan/wiki/Pluginlist

openssl - Crypto backend based on OpenSSL, provides
RSA/ECDSA/DH/ECDH/ciphers/hashers/HMAC/X.509/CRL/RNG

x509 - Advanced X.509 plugin for parsing/generating X.509
certificates/CRLs and OCSP messages

One question here --

Is usage of x509 certificates supported by both the above plugins?
So, if I am enabling openssl plugin, can x509 plugin be disabled?
My use case requires using x509 certificates, without  CRL or OCSP support.

- Divya



More information about the Users mailing list