wiki.strongswan.org
IpsecPKI - strongSwan
https://wiki.strongswan.org/projects/strongswan/wiki/IpsecPKI
Ipsec pki ¶. Ipsec pki - gen. Ipsec pki - self. Ipsec pki - issue. Ipsec pki - signcrl. Ipsec pki - req. Ipsec pki - acert. Since 5.1.3. Ipsec pki - pkcs7. Since 5.0.2. Ipsec pki - pkcs12. Since 5.2.2. Ipsec pki - keyid. Ipsec pki - print. Ipsec pki - dn. Since 5.3.3. Ipsec pki - pub. Ipsec pki - verify. Was introduced with strongSwan 4.3.5. Set up a simple CA. And issue peer certificates.
strongswan.org
strongSwan - strongSwan Authentication Bypass Vulnerability (CVE-2014-2338)
https://www.strongswan.org/blog/2014/04/14/strongswan-authentication-bypass-vulnerability-(cve-2014-2338).html
StrongSwan Authentication Bypass Vulnerability (CVE-2014-2338). Posted on Apr 14, 2014 by tobias. An authentication bypass vulnerability was discovered in strongSwan. It can be triggered by rekeying an unestablished IKEv2 SA while it gets actively initiated. All versions since 4.0.7 are affected. A trusted partner privately reported an authentication bypass vulnerability ( CVE-2014-2338. Only installations that actively initiate or re-authenticate IKEv2 IKE SAs are affected. T.
wiki.strongswan.org
strongSwan Installation Documentation - InstallationDocumentation - strongSwan
https://wiki.strongswan.org/projects/strongswan/wiki/InstallationDocumentation
StrongSwan Installation Documentation ¶. Distribution packages ¶. There are currently packages for:. Red Hat Enterprise Linux and CentOS via EPEL. Compile yourself ¶. Linux Kernel requirements ¶. StrongSwan should run on most distros' kernels. If you build your own kernel, include the required modules. Building strongSwan ¶. Since the release of strongSwan 4.x the GNU build system (Autotools) is used to build strongSwan. Autoconf options for the most current release. Autoconf options for 4.6 releases.
wiki.strongswan.org
Tobias Brunner - strongSwan
https://wiki.strongswan.org/users/8
Registered on: 29.04.2009. Last connection: 15.08.2016. Main Developer, 29.04.2009). Revision ca75ab8d: ikev2: Accept INFORMATIONAL messages with MID 0 if used to sync MIDs. Ikev2: Accept INFORMATIONAL messages with MID 0 if used to sync MIDs. We are very picky to only allow MID 0 for these. Revision 1aecad66: ikev2: Negotiate support for IKE message ID synchronisation during IKE AUTH. Ikev2: Negotiate support for IKE message ID synchronisation during IKE AUTH. Maemo: Remove unused plugin. Also available...
strongswan.org
strongSwan - Test Scenarios
https://www.strongswan.org/test-scenarios.html
StrongSwan - Test Scenarios. Testing environment allows to simulate a multitude of VPN scenarios including NAT-traversal. The framework can be put to many uses:. Automatic testing and interactive debugging of strongSwan releases. Rich configuration examples offered by the strongSwan test suites. Use of the testing environment as a teaching tool in education and training. Building and using the strongSwan integration and regression testing environment. The strongSwan test suites.
strongswan.org
strongSwan - Store
https://www.strongswan.org/store.html
T-Shirts, Mugs, Buttons, Stickers, etc. Made in USA: www.cafepress.com/strongswan/. Made in Germany: www.spreadshirt.net/shop.php?
strongswan.org
strongSwan - Documentation
https://www.strongswan.org/documentation.html
Offers the most up-to-date information and many HOWTOs. Open Source Trend Days 2013 Steinfurt: The strongSwan Open Source VPN Solution. Linux Security Summit August 2012 San Diego: The Linux Integrity Subsystem and TPM-based Network Endpoint Assessment. DFN Betriebstagung 2011 Berlin: VPN with Mobile Devices. DFN Betriebstagung 2011 Berlin: VPN with Mobile Devices Revisited. LinuxTag 2010 Workshop: strongSwan News. LinuxTag 2010 Flyer: strongSwan - The VPN Solution for Mobile Platforms.
strongswan.org
strongSwan - Support
https://www.strongswan.org/support.html
Wiki, Issue Tracking, IRC. StrongSwan support channel on freenode. Irc:/ irc.freenode.net/strongswan. Archives for our mailing lists can be accessed here:. StrongSwan Users list archive. StrongSwan Developer list archive. StrongSwan Announce list archive. You must be a member to write to one of the mailing lists (please do not cross-post the same message to multiple lists). From one of our mailing lists, visit the following links:. For confidentiality use the PGP key B34DBA77.
strongswan.org
strongSwan - About
https://www.strongswan.org/about.html
Is an OpenSource IPsec implementation. It was originally based on the discontinued FreeS/WAN project and the X.509 patch that we developed. In order to have a stable IPsec platform to base the extensions of the X.509 capability on, we decided to launch the strongSwan project in 2005. With strongSwan 5.0.0. StrongSwan originally was designed for Linux, but has since been ported to Android, FreeBSD, Mac OS X, Windows and other platforms. The focus of strongSwan is on. Modular design with great expandability.