This patch was created by 'drwho', and posted to the sfs-dev mailing list on 17 Oct 2003. For his original post, see: http://lists.freeswan.ca/pipermail/sfs-dev/2003-October/000368.html It should apply cleanly against FreeS/WAN 2.03 and 2.04 with X.509. I have not tested this patch yet; just posting it here so it's available somewhere besides the mailing list archives!