[Swan] OCSP apect: Intermediate CA support

jonetsu at teksavvy.com jonetsu at teksavvy.com
Mon Jul 25 23:52:53 UTC 2016


On Mon, 25 Jul 2016 12:19:51 -0400 (EDT)
Paul Wouters <paul at nohats.ca> wrote:

> On Mon, 25 Jul 2016, jonetsu wrote:
> 
> > Is there explicit Intermediate CA support in libreswan itself, or
> > is it exclusively handled by NSS ?
> 
> It is handled fully by NSS (as of libreswan v3.17)
> 
> Older versions still had its own code to do some of the validation
> path.

Thanks.  Does 3.17 go with a specific NSS version for this ?




More information about the Swan mailing list