net-misc/strongswan

IPsec-based VPN solution focused on security and ease of use, supporting IKEv1/IKEv2 and MOBIKE.

Versions

Slot Version Repository Platforms
0 5.9.14 CleverCloud ~amd64 arm? armv7? armv8? x86?

Metadata

Homepage https://www.strongswan.org/
Summary IPsec-based VPN solution focused on security and ease of use, supporting IKEv1/IKEv2 and MOBIKE
Bugs to julien.durillon@gmail.com
Dependencies (
    build+run:
    !net-misc/openswan
    sys-kernel/linux-headers
    sys-libs/pam
    botan? (
        dev-libs/botan:=
    )
    caps? (
        sys-libs/libcap
    )
    curl? (
        net-misc/curl
    )
    gcrypt? (
        dev-libs/libgcrypt:0
    )
    gmp? (
        dev-libs/gmp:=[>=4.1.5]
    )
    ldap? (
        net-directory/openldap
    )
    mysql? (
        providers:mariadb? (
            dev-db/mariadb
        )
        providers:percona? (
            dev-db/Percona-Server:=
        )
    )
    networkmanager? (
        net-apps/NetworkManager
    )
    providers:libressl? (
        dev-libs/libressl:=
    )
    providers:openssl? (
        dev-libs/openssl:=
    )
    sqlite? (
        dev-db/sqlite:3[>=3.3.1]
    )
    systemd? (
        sys-apps/systemd
    )
    run:
    sys-apps/iproute2
    group/ipsec
)
Downloads https://download.strongswan.org/strongswan-5.9.14.tar.bz2
Licences (
    GPL-2
    RSA
    DES
)

Choices

OPTIONS

botan
caps Use Linux capabilities library to control privileges
constraints Advanced X509 constraint checking plugin.
curl Fetch files via libcurl
debug Enable debugging features or make debugging easier
dhcp
eap Enable all EAP modules
farp ARP faking plugin that responds to ARP requests to peers virtual IP
gcrypt
gmp Adds support for GMP (GNU Multiple Precision Arithmetic library)
kernel-libipsec User space IPsec implementation.
kernel-pfkey PF_KEY kernel interface
ldap Fetch files via libldap
mysql Adds MySQL Database support
networkmanager Enable NetworkManager support
pam Adds support PAM (Pluggable Authentication Modules)
pkcs11
sqlite Adds support for SQLite - embedded SQL database
systemd Add support for integration with the systemd init daemon

plugins

blowfish
ccm CCM Authenticated Encryption with Associated Data wrapper plugin
ctr Counter mode wrapper plugin
gcm
ha High availability cluster plugin
ipseckey IPSECKEY authentication plugin
led Control LEDs on IKEv2 activity using the kernel LED subsystem
lookip Fast virtual IP lookup and notification plugin
ntru Quantum-resistent NTRU crypto plugin
padlock VIA Padlock crypto plugin
rdrand Intel RDRAND random generator plugin
systime-fix Handle cert lifetimes with invalid system time gracefully
unity Cisco Unity extension plugin
whitelist

providers

libressl Use LibreSSL as the SSL provider
mariadb mysql database provider
openssl Use OpenSSL as the SSL provider
percona mysql database provider