[  etch  ] [  etch-m68k  ] [  lenny  ] [  squeeze  ] [  sid  ]
[ Source: strongswan  ]

Package: strongswan (4.2.9-1)

IPSec utilities for strongSwan

IPSec is Internet Protocol SECurity. It uses strong cryptography to provide both authentication and encryption services. Authentication ensures that packets are from the right sender and have not been altered in transit. Encryption prevents unauthorised reading of packet contents.

This version of strongSwan supports Opportunistic Encryption (OE) out of the box. OE enables you to set up IPSec tunnels to a site without co-ordinating with the site administrator, and without hand configuring each tunnel. If enough sites support OE, a "FAX effect" occurs, and many of us can communicate without eavesdroppers.

In addition to OE, you may manually configure secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the IPSec gateway machine and decrypted by the gateway at the other end. The result is Virtual Private Network or VPN. This is a network which is effectively private even though it includes machines at several different sites connected by the insecure Internet.

Please note that you will need a recent kernel (>=2.4.24 or 2.6.x) for using this package. The standard Debian kernel includes both IPSec and crypto support, patching the kernel is no longer necessary!

If you want to use the KLIPS IPSec code for kernel modules instead of the native ones, you will need to install either openswan-modules-source or linux-patch-openswan and build the respective modules for your kernel.

Tags: Role: Program, Security: Cryptography

Other Packages Related to strongswan

  • depends
  • recommends
  • suggests
  • dep: bsdmainutils
    collection of more utilities from FreeBSD
  • dep: debconf (>= 0.5)
    Debian configuration management system
    or debconf-2.0
    virtual package provided by cdebconf, cdebconf-udeb, debconf
  • dep: debianutils (>= 1.7)
    Miscellaneous utilities specific to Debian
  • dep: host
    utility for querying DNS servers
    also a virtual package provided by bind9-host
  • dep: iproute
    networking and traffic control tools
  • dep: ipsec-tools
    IPsec tools for Linux
  • dep: libc6 (>= 2.7-1) [not alpha, ia64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6-udeb
  • dep: libc6.1 (>= 2.7-1) [alpha, ia64]
    GNU C Library: Shared libraries
    also a virtual package provided by libc6.1-udeb
  • dep: libcurl3 (>= 7.16.2-1)
    Multi-protocol file transfer library (OpenSSL)
  • dep: libgmp3c2
    Multiprecision arithmetic library
  • dep: libldap-2.4-2 (>= 2.4.7)
    OpenLDAP libraries
  • dep: libssl0.9.8 (>= 0.9.8f-5)
    SSL shared libraries
  • dep: libunwind7 (>= 0.98.5-6) [ia64]
    A library to determine the call-chain of a program - runtime
  • dep: openssl
    Secure Socket Layer (SSL) binary and related cryptographic tools
  • sug: curl
    Get a file from an HTTP, HTTPS or FTP server

Download strongswan

Download for all available architectures
Architecture Package Size Installed Size Files
alpha 1,364.5 kB4188 kB [list of files]
amd64 1,218.1 kB3500 kB [list of files]
armel 1,068.8 kB2876 kB [list of files]
hppa 1,269.1 kB3224 kB [list of files]
i386 1,142.9 kB3096 kB [list of files]
ia64 1,681.6 kB5700 kB [list of files]
mips 1,199.1 kB3580 kB [list of files]
mipsel 1,198.0 kB3584 kB [list of files]
powerpc 1,273.0 kB3620 kB [list of files]
s390 1,297.3 kB3404 kB [list of files]
sparc 1,179.4 kB3404 kB [list of files]