Date: Wed, 05 Jul 2017 15:04:08 +0000 From: bugzilla-noreply@freebsd.org To: freebsd-ports-bugs@FreeBSD.org Subject: [Bug 220488] Strongswan port does not include CURL - this disables OCSP checking! Message-ID: <bug-220488-13@https.bugs.freebsd.org/bugzilla/>
next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D220488 Bug ID: 220488 Summary: Strongswan port does not include CURL - this disables OCSP checking! Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: Individual Port(s) Assignee: freebsd-ports-bugs@FreeBSD.org Reporter: karl@denninger.net The "Strongswan" port does not include the CURL dependency, nor is it explicitly requested during build (or install) and as a result the plugin is missing. This completely disables the ability to check certificates for revocation u= sing OCSP, which is a fairly severe security problem should a certificate be revoked. While CRLs still work of course OCSP is both much lighter-weight and faster, both from a connection point of view and also from the perspective of the CA that issues a given certificate. Please consider updating the port to include this capability. Thanks! --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-220488-13>