• Sign in

Wiki

• Start page
• Index by title
• Index by date

Index by title

• Changelog
  • Changelog for 4.1.x
    • Version 4.1.10
    • Version 4.1.11
    • Version 4.1.4
    • Version 4.1.5
    • Version 4.1.6
    • Version 4.1.7
    • Version 4.1.8
    • Version 4.1.9
  • Changelog for 4.2.x
    • Version 4.2.0
    • Version 4.2.1
    • Version 4.2.10
    • Version 4.2.11
    • Version 4.2.12
    • Version 4.2.13
    • Version 4.2.14
    • Version 4.2.2
    • Version 4.2.3
    • Version 4.2.4
    • Version 4.2.5
    • Version 4.2.6
    • Version 4.2.7
    • Version 4.2.8
    • Version 4.2.9
  • Changelog for 4.3.x
    • Version 4.3.0
    • Version 4.3.1
    • Version 4.3.2
    • Version 4.3.3
    • Version 4.3.4
    • Version 4.3.5
    • Version 4.3.6
  • Changelog for 4.4.x
    • Version 4.4.0
    • Version 4.4.1
  • Changelog for 4.5.x
    • Version 4.5.0
    • Version 4.5.1
    • Version 4.5.2
    • Version 4.5.3
  • Changelog for 4.6.x
    • Version 4.6.0
    • Version 4.6.1
    • Version 4.6.2
    • Version 4.6.3
    • Version 4.6.4
  • Changelog for 5.0.x
    • Version 5.0.0
    • Version 5.0.1
    • Version 5.0.2
    • Version 5.0.3
    • Version 5.0.4
  • Changelog for 5.1.x
    • Version 5.1.0
    • Version 5.1.1
    • Version 5.1.2
    • Version 5.1.3
  • Changelog for 5.2.x
    • Version 5.2.0
    • Version 5.2.1
    • Version 5.2.2
  • Changelog for 5.3.x
    • Version 5.3.0
    • Version 5.3.1
    • Version 5.3.2
    • Version 5.3.3
    • Version 5.3.4
    • Version 5.3.5
  • Changelog for 5.4.x
    • Version 5.4.0
    • Version 5.4.1
  • Changelog for 5.5.x
    • Version 5.5.0
    • Version 5.5.1
    • Version 5.5.2
    • Version 5.5.3
  • Changelog for 5.6.x
    • Version 5.6.0
    • Version 5.6.1
    • Version 5.6.2
    • Version 5.6.3
  • Changelog for 5.7.x
    • Version 5.7.0
    • Version 5.7.1
    • Version 5.7.2
  • Changelog for 5.8.x
    • Version 5.8.0
    • Version 5.8.1
    • Version 5.8.2
    • Version 5.8.3
    • Version 5.8.4
  • Changelog for 5.9.x
    • Version 5.9.0
    • Version 5.9.1
    • Version 5.9.2
• strongSwan Developer Documentation
  • IKE keying daemon charon
  • Contributions
  • Dynamic Uml Mesh Modeler
  • Fuzzing
  • libfast - FastCGI Application Server w/ Templates
  • libstrongswan
  • Linux IPsec Workshop 2018
  • Load Tests
  • strongSwan Manager
    • An XML based management protocol for strongSwan (SMP)
      • Querying IKESAs using SMP
  • Object Oriented C programming style
  • IKEv1 keying daemon pluto
  • Programming Style
  • Secure Coding Standard
  • strongSwan History
  • Integration and Regression Testing Environment
    • OpenSSL packages for the Testing Environment
• strongSwan Installation Documentation
  • Autoconf options for the most current strongSwan release
  • Autoconf options for strongSwan 4.6 releases
  • Required Kernel Modules
• Documentation about IPsec
  • IPsec and related standards
• Known Issues caused by third party software
• NoelWantsStuff
• Portability
  • strongSwan on Android
    • Integration into the Android VPN frontend
    • strongSwan VPN Client for Android
      • Building the strongSwan VPN Client for Android
      • Privacy Policy for "strongSwan VPN Client for Android"
      • VPN Profile Import for the Android VPN Client
  • strongSwan on FreeBSD
  • strongSwan on Mac OS X
  • strongSwan on Maemo (Nokia N900)
  • strongSwan on OpenWrt
    • UCI Configuration Backend
    • X-Wrt Configuration Frontend
  • strongSwan on Windows
    • charon-svc
    • kernel-iph Plugin
    • kernel-wfp Plugin
    • socket-win Plugin
    • winhttp Plugin
• Quantum Safe Key Exchange
• Sidebar
• Sign up
• strongSwan Wiki
  • StartLinks
• Trusted Platform Module 2.0 (Legacy)
• strongSwan User Documentation
  • CA management made easy using GUIs
  • charon-cmd - Simple command line IPsec/IKE VPN client
  • charon-systemd
  • Cloud Platforms
    • Setting Up a VPN into Amazon's Public Cloud VPC
  • Commercial Support Offerings
  • Configuration Examples
    • Advanced Cipher Suite Examples
    • Notes on Configuration Examples
    • IKEv1 Configuration Examples
    • IKEv1 Configuration Examples
    • IKEv1 Legacy Configuration Examples
    • IKEv2 Configuration Examples
    • IKEv2 Legacy Configuration Examples
    • Integrity and Crypto Test Examples
    • IPv6 Configuration Examples
    • IPv6 Legacy Configuration Examples
  • Configuration Files
    • ipsec.conf Reference
      • ipsec.conf: ca Reference
      • ipsec.conf: config setup Reference
      • ipsec.conf: conn Reference
    • ipsec.d
      • ipsec.d/aacerts
      • ipsec.d/acerts
      • ipsec.d/cacerts
      • ipsec.d/certs
      • ipsec.d/crls
      • ipsec.d/ocspcerts
      • ipsec.d/private
      • ipsec.d/reqs
    • ipsec.secrets Reference
      • BLISS Secret
      • EAP Secret
      • ECDSA Secret
      • NTLM Secret
      • PKCS#12 Secret
      • PIN Secret
      • PSK Secret
      • RSA Secret
      • XAUTH Secret
    • strongswan.conf Reference
    • strongswan.d
    • swanctl.conf
      • Migration from ipsec.conf to swanctl.conf
    • swanctl Directory
  • Taking traffic dumps on Linux
  • Crypto Tests
  • Expiry and Replacement of IKE and IPsec SAs (Rekeying, Reauthentication)
  • Frequently Asked Questions (FAQ)
  • Security and Functional Flaw Reporting
  • Hash and URL
  • Requesting Help and Reporting Bugs
  • High Availability
  • Identity Parsing in strongSwan
  • Tuning IKE_SA lookup
  • IKEv1 Cipher Suites
  • IKEv2 Cipher Suites
  • Integrity Tests
  • Interoperability
    • iOS (Apple iPhone/iPad...) and macOS Interoperability
      • Configuration Example Using IKEv1 With Apple Clients (iOS, Mac OS X)
      • IKEv2 Configuration Profile for Apple iOS 8 and newer
    • AVM FRITZ (FRITZ!Box, ...) brand devices
    • BlackBerry OS 10
    • Charon-Pluto IKEv1 Interoperability
    • Interoperability with Check Point (Checkpoint) brand devices
    • Interoperability with CISCO brand devices
    • Interoperability with Fortinet brand devices
    • Interoperability with Juniper brand devices
    • Windows Clients
      • Requirements for certificates used with Windows 7
      • Storing a Windows 7 Machine Certificate
      • Windows 7 Client Configuration
      • Starting a Windows 7 Agile VPN Connection
      • Storing a Windows 7 CA Certificate
      • Windows 7 Client Configuration using EAP-MSCHAPv2
      • strongSwan EAP Configuration for Multiple Windows 7 Clients
      • strongSwan Connection Status and Log Information
      • strongSwan Configuration for Multiple Windows 7 Clients
      • strongSwan Configuration for a Single Windows 7 Client
      • strongSwan Connection Status and Log Information
      • Windows 7 Client Configuration with User Certificates
      • strongSwan Configuration for Multiple Windows 7 Clients with User Certificates
    • Windows Suite B Support with IKEv1
  • Introduction to strongSwan
    • Introduction to strongSwan: Forwarding and Split-Tunneling
    • Introduction to strongSwan: IKEv2 Remote Access Client Configuration
    • IPv6 and the Neighbor Discovery Protocol (NDP)
  • IPComp
  • ipsec attest
  • ipsec
  • ipsec conftest
  • ipsec leases
  • pki
    • pki --acert
    • pki --dn
    • pki --gen
    • pki --issue
    • pki --keyid
    • pki --pkcs12
    • pki --pkcs7
    • pki --print
    • pki --pub
    • pki --req
    • pki --self
    • pki --signcrl
    • pki --verify
    • Setting-up a Simple CA Using the strongSwan PKI Tool
  • ipsec pool
  • starter
  • stroke
  • Job priority management
  • Logger Configuration
  • MOBIKE
  • Mobile IPv6 HOWTO
    • MIPv6 Home Agent Setup
    • MIPv6 Mobile Node Setup
  • NAT Traversal (NAT-T)
  • Running strongSwan in Network Namespaces on Linux
  • NetworkManager
  • openac
  • Parallel Crypto Engine for the Linux Kernel
  • strongSwan plugins
    • addrblock plugin
    • attr plugin
    • attr-sql plugin
    • Bimodal Lattice Signature Scheme (BLISS)
      • Huffman Codes for BLISS Signatures
    • bypass-lan Plugin
    • Certificate coupling
    • certexpire Plugin
    • connmark Plugin
    • constraints plugin
    • counters Plugin
    • curl Plugin
    • dhcp plugin
    • duplicheck plugin
    • eap-dynamic Plugin
    • eap-gtc Plugin
    • EAP-Radius
    • eap-simaka-sql Plugin
    • EAP-TLS authentication
    • error-notify Plugin
    • ext-auth Plugin
    • farp Plugin
    • forecast Plugin
    • kernel-libipsec plugin
    • Lookip Plugin
    • New Hope Post-Quantum Key Exchange Algorithm
    • NTRU
    • radattr plugin
    • resolve plugin
    • SQL configuration and credential plugin
      • SQLite HOWTO
    • systime-fix Plugin
    • Trusted Platform Module 2.0
    • unity plugin
    • updown Plugin
    • vici Plugin
    • Whitelist Plugin
    • XAuth EAP Plugin
    • xauth-noauth plugin
    • XAuth PAM Plugin
  • Plugin Load Options
  • pt-tls-client
  • Speed Comparison of Public Key Algorithms
  • Raspberry Pi 2 ESP Benchmark
  • Running strongSwan with reduced privileges
  • Retransmission
  • Route-based VPNs
  • scepclient
  • sec-updater
  • Security Recommendations
  • strongSwan smart card configuration HOWTO
    • Using smart cards
  • Connecting Subnets Behind More Than Two Gateways
  • swanctl
  • sw-collector
  • Third Party provided tools for strongSwan
  • Trusted Network Connect (TNC) HOWTO
    • Build IMC/IMV Dynamic Libraries Only
    • Android BYOD Security based on Trusted Network Connect
    • Hardcopy Device Integrity Measurement Collector
    • Hardcopy Device Integrity Measurement Verifier
    • strongSwan MAP Client HOWTO
    • Linux Integrity Measurement Architecture (IMA)
      • IMA Client Log
      • IMA Server Log
    • Raspi 3 - Initiating IoT Device
    • Raspi 4 - Responding IoT Device
    • Optimum PB-TNC Batch and PA-TNC Message Sizes
    • strongSwan as a Policy Enforcement Point
    • Endpoint Compliance via PT-EAP Protocol
    • Endpoint Compliance via PT-TLS Protocol
    • TNC Client with PTS-IMC
    • TNC Server with PTS-IMV
    • strongTNC Policy Manager
    • The swidGenerator Tool
    • Software Inventory Message and Attributes for PA-TNC (SWIMA)
      • PT-TLS SWIMA Client
      • PT-TLS SWIMA Server
    • strongSwan as TNC Client
    • strongSwan as TNC Server
  • Usable Examples configurations
  • Virtual IP

Also available in: Atom