OpenSource IPsec-based VPN Solution

Edit Package strongswan.22505

StrongSwan is an OpenSource IPsec-based VPN Solution for Linux

* runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels
* implements both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols
* Fully tested support of IPv6 IPsec tunnel and transport connections
* Dynamical IP address and interface update with IKEv2 MOBIKE (RFC 4555)
* Automatic insertion and deletion of IPsec-policy-based firewall rules
* Strong 128/192/256 bit AES or Camellia encryption, 3DES support
* NAT-Traversal via UDP encapsulation and port floating (RFC 3947)
* Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels
* Static virtual IPs and IKEv1 ModeConfig pull and push modes
* XAUTH server and client functionality on top of IKEv1 Main Mode authentication
* Virtual IP address pool managed by IKE daemon or SQL database
* Secure IKEv2 EAP user authentication (EAP-SIM, EAP-AKA, EAP-MSCHAPv2, etc.)
* Optional relaying of EAP messages to AAA server via EAP-RADIUS plugin
* Support of IKEv2 Multiple Authentication Exchanges (RFC 4739)
* Authentication based on X.509 certificates or preshared keys
* Generation of a default self-signed certificate during first strongSwan startup
* Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
* Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
* CA management (OCSP and CRL URIs, default LDAP server)
* Powerful IPsec policies based on wildcards or intermediate CAs
* Group policies based on X.509 attribute certificates (RFC 3281)
* Storage of RSA private keys and certificates on a smartcard (PKCS #11 interface)
* Modular plugins for crypto algorithms and relational database interfaces
* Support of elliptic curve DH groups and ECDSA certificates (Suite B, RFC 4869)
* Optional built-in integrity and crypto tests for plugins and libraries
* Smooth Linux desktop integration via the strongSwan NetworkManager applet

This package triggers the installation of both, IKEv1 and IKEv2 daemons.

Refresh
Refresh
Source Files
Filename Size Changed
0005-restore-registration-algorithm-order.bug897512.patch 0000011815 11.5 KB
0006-strongswan-5.1.2-5.2.1_modp_custom.CVE-2014-9221.patch 0000006246 6.1 KB
0008-strongswan-pkifix.918474.patch 0000000571 571 Bytes
0009-strongswan-5.1.0-5.3.1_enforce_remote_auth.patch 0000003032 2.96 KB
0010-strongswan-4.4.0-5.3.3_eap_mschapv2_state.patch 0000001052 1.03 KB
0011-ikev1-Don-t-retransmit-Aggressive-Mode-response.patch 0000001092 1.07 KB
0012-Make-sure-the-modulus-is-odd-and-the-exponent-not-zero.patch 0000001318 1.29 KB
0013-asn1-parser-Fix-CHOICE-parsing.patch 0000015833 15.5 KB
0014-Fix-RSA-signature-verification-for-m.patch 0000001569 1.53 KB
0015-strongswan-5.3.3-ikev1-drop-transaction-quick-mode-requests.patch 0000001768 1.73 KB
0016-strongswan-5.3.3-ikev1-extrat-queuing-of-transactional-messages.patch 0000002278 2.22 KB
0017-strongswan-5.3.3-ikev1-queue-informational-request-if-am.patch 0000001400 1.37 KB
0018-strongswan-5.4.1dr4-queue-informational-msgs.patch 0000002739 2.67 KB
0019-libtls-As-client-reject-DH-exchanges-using-primes-sm.patch 0000001727 1.69 KB
0020-strongswan-5.0.1-5.3.0_gmp-pkcs1-verify.patch 0000009402 9.18 KB
0021-strongswan-5.1.2-5.6.2_stroke_msg_len.patch 0000000911 911 Bytes
0022-strongswan-5.0.1-5.4.0_skeyseed_init.patch 0000001572 1.54 KB
0023-strongswan-4.4.0-5.7.0_gmp-pkcs1-overflow.patch 0000001576 1.54 KB
0024-curl-Dynamically-query-supported-protocols-and-regis.patch 0000002916 2.85 KB
0025-configure-Load-fetcher-plugins-after-crypto-base-plu.patch 0000506832 495 KB
0026-curl-For-SSL-features-depend-on-thread-safety-provid.patch 0000004652 4.54 KB
README.SUSE 0000002342 2.29 KB
fips-enforce.conf 0000000742 742 Bytes
fipscheck.sh.in 0000001934 1.89 KB
strongswan-4.4.1-5.9.3_cert-cache-random.patch 0000001575 1.54 KB
strongswan-5.0.1-5.4.0_eap_success-CVE-2021-45079.patch 0000005876 5.74 KB
strongswan-5.1.3-rpmlintrc 0000000428 428 Bytes
strongswan-5.1.3.tar.bz2 0003807212 3.63 MB
strongswan-5.1.3.tar.bz2.sig 0000000665 665 Bytes
strongswan-ikev2-cavs.patch 0000016025 15.6 KB
strongswan-ikev2-cavs_driver.pl 0000005580 5.45 KB
strongswan.changes 0000072878 71.2 KB
strongswan.init.in 0000008747 8.54 KB
strongswan.keyring 0000003085 3.01 KB
strongswan.spec 0000041289 40.3 KB
strongswan_fipscheck.patch 0000001909 1.86 KB
strongswan_fipsfilter.patch 0000007869 7.68 KB
strongswan_ipsec_service.patch 0000000198 198 Bytes
strongswan_modprobe_syslog.patch 0000001869 1.83 KB
Latest Revision
Gabriele Sonnu's avatar Gabriele Sonnu (gsonnu) committed (revision 1)
Release from SUSE:Maintenance:22505 / strongswan.SUSE_SLE-12_Update
Comments 0
openSUSE Build Service is sponsored by