strongSwan 4.1.3

strongSwan is an OpenSource IPsec implementation for the Linux operating system.

· runs both on Linux 2.4 (KLIPS IPsec) and Linux 2.6 (NETKEY IPsec) kernels
· supports both the IKEv1 and IKEv2 (RFC 4306) key exchange protocols NEW
· Fast connection startup and periodic update using ipsec starter
· Automatic insertion and deletion of IPsec policy based firewall rules
· Strong 3DES, AES, Serpent, Twofish, or Blowfish encryption
· NAT-Traversal via UDP encapsulation and port floating (RFC 3947)
· Static Virtual IPs and IKE Mode Config Pull and Push modes
· XAUTH server and client functionality on top of IKE Main Mode authentication
· Dead Peer Detection (DPD, RFC 3706) takes care of dangling tunnels
· Authentication based on X.509 certificates or preshared keys
· Generation of a default self-signed certificate during first strongSwan startup
· Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
· Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
· CA management (OCSP and CRL URIs, default LDAP server)
· Powerful IPsec policies based on wildcards or intermediate CAs
· Group policies based on X.509 attribute certificates ( RFC 3281)
· Optional storage of RSA private keys and certificates on a smartcard
· Smartcard access via standardized PKCS #11 interface
· PKCS #11 proxy function offering RSA decryption services via whack

Ограничения не определены

Специальные требования не определены

История изменений пуста