Greetings, I am learning to use openssl to generate certificates for a vpn specifically the ipsec implementation called strongswan.. I am using a modern linux distribution with a recent version of openssl. The strongswan online documentation at:
http://www.strongswan.org/docs/readme4.htm has this excerpt:- { As an alternative an OCSP URI can be embedded into the VPN host and user certificates by putting the line authorityInfoAccess=OCSP;URI:http://ocsp.strongswan.org:8880 into the [ usr_cert ] section of your openssl.cnf } QUESTION:- When generating ssl certificates, can one specify multiple URI's for OCSP servers like so:- authorityInfoAccess=OCSP;URI1:http://ocsp.somehost.com:8880 authorityInfoAccess=OCSP;URI2:http://ocsp.someotherhost.com:8880 thanks in advance sincerely luxInteg ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [email protected] Automated List Manager [email protected]
