StrongSwan -- OpenSource IPsec-based VPN Solution
StrongSwan is an OpenSource IPsec-based VPN Solution for Linux * runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels * implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols * NEW: Fully tested support of IPv6 IPsec tunnel connections * Dynamical IP address and interface update with IKEv2 MOBIKE (RFC 4555) * Fast connection startup and periodic update using ipsec starter * Automatic insertion and deletion of IPsec policy based firewall rules * Strong 3DES, AES, Serpent, Twofish, or Blowfish encryption * NAT-Traversal via UDP encapsulation and port floating (RFC 3947) * Static Virtual IPs and IKE Mode Config Pull and Push modes * XAUTH server and client functionality on top of IKE Main Mode authentication * Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels * Authentication based on X.509 certificates or preshared keys * Generation of a default self-signed certificate during first strongSwan startup * Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP * Full support of the Online Certificate Status Protocol (OCSP, RCF 2560). * CA management (OCSP and CRL URIs, default LDAP server) * Powerful IPsec policies based on wildcards or intermediate CAs * Group policies based on X.509 attribute certificates ( RFC 3281) * Optional storage of RSA private keys and certificates on a smartcard * Smartcard access via standardized PKCS #11 interface * PKCS #11 proxy function offering RSA decryption services via whack * NEW: strongSwan Manager - a graphical management interface for IKEv2
-
Links to network:vpn / strongswan
-
Download package
Source Files
(show merged sources derived from linked package)
Filename | Size | Changed | Actions |
---|---|---|---|
0005-strongswan-5.2.2-5.3.0_unknown_payload.patch | 00000060475.91 KB | 1433770902almost 3 years ago | ![]() |
0006-strongswan-5.1.0-5.3.1_enforce_remote_auth.pa |
00000030322.96 KB | 1433770816almost 3 years ago | ![]() |
0007-strongswan-4.4.0-5.3.3_eap_mschapv2_state.pat |
00000010521.03 KB | 1447687351over 2 years ago | ![]() |
README.SUSE | 00000023422.29 KB | 1415608748over 3 years ago | ![]() |
_link | 0000000119119 Bytes | 1467620851almost 2 years ago | ![]() |
fips-enforce.conf | 0000000742742 Bytes | 1416571318over 3 years ago | ![]() |
fipscheck.sh.in | 00000019341.89 KB | 1415608748over 3 years ago | ![]() |
strongswan-5.2.2-rpmlintrc | 0000000428428 Bytes | 1420468892over 3 years ago | ![]() |
strongswan-5.2.2.tar.bz2 | 00041690953.98 MB | 1420468895over 3 years ago | ![]() |
strongswan-5.2.2.tar.bz2.sig | 0000000648648 Bytes | 1420468896over 3 years ago | ![]() |
strongswan.changes | 000007452272.8 KB | 1447687352over 2 years ago | ![]() |
strongswan.init.in | 00000087478.54 KB | 1329313690about 6 years ago | ![]() |
strongswan.keyring | 00000030853.01 KB | 1354212830over 5 years ago | ![]() |
strongswan.spec | 000003894238 KB | 1447687352over 2 years ago | ![]() |
strongswan_fipscheck.patch | 00000019281.88 KB | 1420468897over 3 years ago | ![]() |
strongswan_fipsfilter.patch | 00000080107.82 KB | 1420468897over 3 years ago | ![]() |
strongswan_ipsec_service.patch | 0000000198198 Bytes | 1351699687over 5 years ago | ![]() |
strongswan_modprobe_syslog.patch | 00000018691.83 KB | 1351617411over 5 years ago | ![]() |