LogoopenSUSE Build Service > Projects
Sign Up | Log In

OpenSource IPsec-based VPN Solution
http://www.strongswan.org/

StrongSwan is an OpenSource IPsec-based VPN Solution for Linux

* runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels
* implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols
* Fully tested support of IPv6 IPsec tunnel and transport connections
* Dynamical IP address and interface update with IKEv2 MOBIKE (RFC 4555)
* Automatic insertion and deletion of IPsec-policy-based firewall rules
* Strong 128/192/256 bit AES or Camellia encryption, 3DES support
* NAT-Traversal via UDP encapsulation and port floating (RFC 3947)
* Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels
* Static virtual IPs and IKEv1 ModeConfig pull and push modes
* XAUTH server and client functionality on top of IKEv1 Main Mode authentication
* Virtual IP address pool managed by IKE daemon or SQL database
* Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-MSCHAPv2, etc.)
* Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin
* Support of IKEv2 Multiple Authentication Exchanges (RFC 4739)
* Authentication based on X.509 certificates or preshared keys
* Generation of a default self-signed certificate during first strongSwan startup
* Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
* Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
* CA management (OCSP and CRL URIs, default LDAP server)
* Powerful IPsec policies based on wildcards or intermediate CAs
* Group policies based on X.509 attribute certificates (RFC 3281)
* Storage of RSA private keys and certificates on a smartcard (PKCS #11 interface)
* Modular plugins for crypto algorithms and relational database interfaces
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
* Optional built-in integrity and crypto tests for plugins and libraries
* Smooth Linux desktop integration via the strongSwan NetworkManager applet

This package triggers the installation of both, IKEv1 and IKEv2 daemons.

Authors:
--------
    Andreas Steffen
    and others

Source Files

Filename Size Changed Actions
0005-strongswan-5.2.2-5.3.0_unknown_payload.patch 5.91 KB almost 3 years ago Download File
0006-strongswan-5.1.0-5.3.1_enforce_remote_auth.patch 2.96 KB almost 3 years ago Download File
0007-strongswan-4.4.0-5.3.3_eap_mschapv2_state.patch 1.03 KB over 2 years ago Download File
README.SUSE 2.29 KB over 3 years ago Download File
fips-enforce.conf 742 Bytes over 3 years ago Download File
fipscheck.sh.in 1.89 KB over 3 years ago Download File
strongswan-5.2.2-rpmlintrc 428 Bytes over 3 years ago Download File
strongswan-5.2.2.tar.bz2 3.98 MB over 3 years ago Download File
strongswan-5.2.2.tar.bz2.sig 648 Bytes over 3 years ago Download File
strongswan.changes 72.8 KB over 2 years ago Download File
strongswan.init.in 8.54 KB about 6 years ago Download File
strongswan.keyring 3.01 KB over 5 years ago Download File
strongswan.spec 38 KB over 2 years ago Download File
strongswan_fipscheck.patch 1.88 KB over 3 years ago Download File
strongswan_fipsfilter.patch 7.82 KB over 3 years ago Download File
strongswan_ipsec_service.patch 198 Bytes over 5 years ago Download File
strongswan_modprobe_syslog.patch 1.83 KB over 5 years ago Download File

Comments for home:draht (0)