[strongSwan] OCSP and CDP

Modster, Anthony Anthony.Modster at Teledyne.com
Thu Dec 19 17:56:25 CET 2019


OK, now I am curious

? is there a developers guide for writing plugins

? what would the plugin do

? does (RFC 6960) apply

Thanks

-----Original Message-----
From: Tobias Brunner <tobias at strongswan.org> 
Sent: Thursday, December 19, 2019 8:53 AM
To: Modster, Anthony <Anthony.Modster at Teledyne.com>; users at lists.strongswan.org
Subject: Re: [strongSwan] OCSP and CDP

---External Email---

Hi Anthony,

> ? can strongswan be a OCSP or CDP server

Theoretically yes, but you'd have to program a plugin that does that yourself.

It would theoretically also be possible to transmit CRLs (RFC 7296) and OCSP (RFC 4806) via IKEv2 certificate payloads, but strongSwan currently doesn't support this.

Regards,
Tobias


More information about the Users mailing list