Package: charon-cmd Description-md5: 80fd42eb6fb38dab592c2f0b87243623 Description-en: standalone IPsec client The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . This package contains the charon-cmd command, which can be used as a client to connect to a remote IKE daemon. Package: libcharon-extra-plugins Description-md5: b38ca344004a072b358d09bd7d91635c Description-en: strongSwan charon library (extra plugins) The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . This package provides extra plugins for the charon library: - addrblock (Narrow traffic selectors to RFC 3779 address blocks in X.509 certificates) - certexpire (Export expiration dates of used certificates) - eap-aka (Generic EAP-AKA protocol handler using different backends) - eap-gtc (EAP-GTC protocol handler authenticating with XAuth backends) - eap-identity (EAP-Identity identity exchange algorithm, to use with other EAP protocols) - eap-md5 (EAP-MD5 protocol handler using passwords) - eap-radius (EAP server proxy plugin forwarding EAP conversations to a RADIUS server) - eap-tls (EAP-TLS protocol handler, to authenticate with certificates in EAP) - eap-tnc (EAP-TNC protocol handler, Trusted Network Connect in a TLS tunnel) - eap-ttls (EAP-TTLS protocol handler, wraps other EAP methods securely) - error-notify (Notification about errors via UNIX socket) - ha (High-Availability clustering) - kernel-libipsec (Userspace IPsec Backend with TUN devices) - led (Let Linux LED subsystem LEDs blink on IKE activity) - lookip (Virtual IP lookup facility using a UNIX socket) - tnc (Trusted Network Connect) - unity (Cisco Unity extensions for IKEv1) - xauth-eap (XAuth backend that uses EAP methods to verify passwords) - xauth-pam (XAuth backend that uses PAM modules to verify passwords) - eap-dynamic (EAP proxy plugin that dynamically selects an EAP method requested/supported by the client (since 5.0.1)) - eap-peap (EAP-PEAP protocol handler, wraps other EAP methods securely) Package: libstrongswan-extra-plugins Description-md5: 1e1a1805a79ee75000b9db20a1394f6a Description-en: strongSwan utility and crypto library (extra plugins) The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . This package provides extra plugins for the strongSwan utility and cryptographic library. . Included plugins are: - aes (AES-128/192/256 cipher software implementation) - af-alg [linux] (AF_ALG Linux crypto API interface, provides ciphers/hashers/hmac/xcbc) - ccm (CCM cipher mode wrapper) - cmac (CMAC cipher mode wrapper) - ctr (CTR cipher mode wrapper) - curl (libcurl based HTTP/FTP fetcher) - curve25519 (support for Diffie-Hellman group 31 using Curve25519 and support for the Ed25519 digital signature algorithm for IKEv2) - fips-prf (PRF specified by FIPS, used by EAP-SIM/AKA algorithms) - gcrypt (Crypto backend based on libgcrypt, provides RSA/DH/ciphers/hashers/rng) - gmp (RSA/DH crypto backend based on libgmp) - hmac (HMAC wrapper using various hashers) - ldap (LDAP fetching plugin based on libldap) - md5 (MD5 hasher software implementation) - mgf1 (Mask Generation Functions based on the SHA-1, SHA-256 and SHA-512) - padlock (VIA padlock crypto backend, provides AES128/SHA1) - pgp (PGP encoding/decoding routines) - pkcs11 (PKCS#11 smartcard backend) - pkcs12 (PKCS#12 decoding routines) - rc2 (RC2 cipher software implementation) - rdrand (High quality / high performance random source using the Intel rdrand instruction found on Ivy Bridge processors) - sha1 (SHA1 hasher software implementation) - sha2 (SHA256/SHA384/SHA512 hasher software implementation) - test-vectors (Set of test vectors for various algorithms) - xcbc (XCBC wrapper using various ciphers) . Also included is the libtpmtss library adding support for TPM plugin (https://wiki.strongswan.org/projects/strongswan/wiki/TpmPlugin) Package: packagekit-command-not-found Description-md5: f46269a57fdaac0b45bc1962744cdaf3 Description-en: Offer to install missing programs automatically PackageKit allows performing simple software management tasks over a DBus interface e.g refreshing the cache, updating, installing and removing software packages or searching for multimedia codecs and file handlers. . This package contains a simple handler for command_not_found that offers to install missing packages on the command line using PackageKit. Package: packagekit-gtk3-module Description-md5: b4094b413124ff3eeddd6dcdb91ab037 Description-en: Install fonts automatically using PackageKit PackageKit allows performing simple software management tasks over a DBus interface e.g. refreshing the cache, updating, installing and removing software packages or searching for multimedia codecs and file handlers. . The PackageKit GTK+ module allows any Pango application to install fonts from configured repositories using PackageKit. Package: strongswan-charon Description-md5: 3f55915d17f7e36d9b31e2c4da5c11d2 Description-en: strongSwan Internet Key Exchange daemon The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . charon is an IPsec IKEv2 daemon which can act as an initiator or a responder. It is written from scratch using a fully multi-threaded design and a modular architecture. Various plugins can provide additional functionality. Package: strongswan-nm Description-md5: fe4e82468fec86f66c41601086865ec7 Description-en: strongSwan plugin to interact with NetworkManager The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . This plugin provides an interface which allows NetworkManager to configure and control the IKEv2 daemon directly through D-Bus. It is designed to work in conjunction with the network-manager-strongswan package, providing a simple graphical frontend to configure IPsec based VPNs. Package: strongswan-pki Description-md5: e39ead8c35dce81cd768bc453bc29db7 Description-en: strongSwan IPsec client, pki command The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . This package contains the pki tool which allows on to run a simple public key infrastructure. Package: strongswan-starter Description-md5: b25b8defb52457fc021a93ec427b9da8 Description-en: strongSwan daemon starter and configuration file parser The strongSwan VPN suite uses the native IPsec stack in the standard Linux kernel. It supports both the IKEv1 and IKEv2 protocols. . The starter and the associated "ipsec" script control the charon daemon from the command line. It parses ipsec.conf and loads the configurations to the daemon.