all options
jessie  ] [  stretch  ] [  buster  ] [  sid  ]
[ Source: strongswan  ]

Package: libstrongswan (5.7.2-1)

Links for libstrongswan


Debian Resources:

Download Source Package strongswan:


External Resources:

Similar packages:

strongSwan utility and crypto library

The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols.

This package provides the underlying libraries of charon and other strongSwan components. It is built in a modular way and is extendable through various plugins.

Some default (as specified by the strongSwan projet) plugins are included. For libstrongswan (cryptographic backends, URI fetchers and database layers):

 - aes (AES-128/192/256 cipher software implementation)
 - constraints (X.509 certificate advanced constraint checking)
 - dnskey (Parse RFC 4034 public keys)
 - fips-prf (PRF specified by FIPS, used by EAP-SIM/AKA algorithms)
 - gmp (RSA/DH crypto backend based on libgmp)
 - hmac (HMAC wrapper using various hashers)
 - md5 (MD5 hasher software implementation)
 - nonce (Default nonce generation plugin)
 - pem (PEM encoding/decoding routines)
 - pgp (PGP encoding/decoding routines)
 - pkcs1 (PKCS#1 encoding/decoding routines)
 - pkcs8 (PKCS#8 decoding routines)
 - pkcs12 (PKCS#12 decoding routines)
 - pubkey (Wrapper to handle raw public keys as trusted certificates)
 - random (RNG reading from /dev/[u]random)
 - rc2 (RC2 cipher software implementation)
 - revocation (X.509 CRL/OCSP revocation checking)
 - sha1 (SHA1 hasher software implementation)
 - sha2 (SHA256/SHA384/SHA512 hasher software implementation)
 - sshkey (SSH key decoding routines)
 - x509 (Advanced X.509 plugin for parsing/generating X.509 certificates/CRLs
   and OCSP messages)
 - xcbc (XCBC wrapper using various ciphers)
 - attr (Provides IKE attributes configured in strongswan.conf)
 - kernel-netlink [linux] (IPsec/Networking kernel interface using Linux
 - kernel-pfkey [kfreebsd] (IPsec kernel interface using PF_KEY)
 - kernel-pfroute [kfreebsd] (Networking kernel interface using PF_ROUTE)
 - resolve (Writes name servers received via IKE to a resolv.conf file or
   installs them via resolvconf(8))

Also included is the libtpmtss library adding support for TPM plugin (

Tags: Networking: VPN or Tunneling, Role: Shared Library, Security: Cryptography

Other Packages Related to libstrongswan

  • depends
  • recommends
  • suggests
  • enhances

Download libstrongswan

Download for all available architectures
Architecture Package Size Installed Size Files
alpha (unofficial port) 424.7 kB1,454.0 kB [list of files]
amd64 411.7 kB1,400.0 kB [list of files]
arm64 399.3 kB1,303.0 kB [list of files]
armel 365.1 kB1,106.0 kB [list of files]
armhf 370.1 kB922.0 kB [list of files]
hppa (unofficial port) 421.6 kB1,511.0 kB [list of files]
i386 432.8 kB1,410.0 kB [list of files]
kfreebsd-amd64 401.4 kB1,264.0 kB [list of files]
kfreebsd-i386 422.2 kB1,279.0 kB [list of files]
m68k (unofficial port) 369.0 kB1,170.0 kB [list of files]
mips 374.4 kB1,281.0 kB [list of files]
mips64el 375.6 kB1,449.0 kB [list of files]
mipsel 379.0 kB1,281.0 kB [list of files]
powerpcspe (unofficial port) 386.7 kB2,643.0 kB [list of files]
ppc64 (unofficial port) 425.8 kB2,983.0 kB [list of files]
ppc64el 428.2 kB2,915.0 kB [list of files]
riscv64 (unofficial port) 375.5 kB1,038.0 kB [list of files]
s390x 394.9 kB1,387.0 kB [list of files]
sh4 (unofficial port) 420.8 kB1,073.0 kB [list of files]
sparc64 (unofficial port) 356.6 kB1,320.0 kB [list of files]
x32 (unofficial port) 413.8 kB1,322.0 kB [list of files]