strongSwan 4.3.4 - Free strongSwan Download at Downloadplex.com

strongSwan Publisher's description:

from Andreas Steffen

strongSwan is an OpenSource IPsec implementation for the Linux operating system.

strongSwan is an OpenSource IPsec implementation for the Linux operating system. strongSwan is an OpenSource IPsec implementation for the Linux operating system.

In order to have a stable IPsec platform to base our future extensions of the X.509 capability on, we decided to lauch the strongSwan project.

Here are some key features of "strongSwan":

· runs both on Linux 2.4 (KLIPS) and Linux 2.6 (native IPsec) kernels
· strong 3DES, AES, Serpent, Twofish, or Blowfish encryption
· Authentication based on X.509 certificates or preshared keys
· Powerful IPsec policies based on wildcards or intermediate CAs
· Retrieval and local caching of Certificate Revocation Lists via HTTP or LDAP
· Full support of the Online Certificate Status Protocol (OCSP, RCF 2560).
· Optional storage of RSA private keys on smartcards or USB crypto tokens
· Smartcard access via standardized PKCS #11 interface
· PKCS #11 proxy function offering RSA decryption services via whack
· NAT-Traversal (RFC 3947) and support of Virtual IPs and IKE Mode Config
· CA management (OCSP and CRL URIs, default LDAP server)
· Dead Peer Detection (DPD, RFC 3706)
· Group policies based on X.509 attribute certificates ( RFC 3281)
· Generation of default self-signed certificates during strongSwan setup
You can free download strongSwan 4.3.4 now.

What's New in This Release:

· The new gcrypt plugin provides symmetric cipher, hasher, RNG, Diffie-Hellman and RSA crypto primitives using the LGPL licensed GNU gcrypt library.

· libstrongswan features an integrated crypto selftest framework for registered algorithms. The test-vector plugin provides a first set of test vectors and allows pluto and charon to rely on tested crypto algorithms.

· pluto can now use all libstrongswan plugins with the exception of x509 and xcbc. Thanks to the openssl plugin, the ECP Diffie-Hellman groups 19, 20, 21, 25, and 26 as well as ECDSA-256, ECDSA-384, and ECDSA-521 authentication can be used with IKEv1.

· Applying their fuzzing tool, the Orange Labs vulnerability research team found another two DoS vulnerabilities, one in the rather old ASN.1 parser of Relative Distinguished Names (RDNs) and a second one in the conversion of ASN.1 UTCTIME and GENERALIZEDTIME strings to a time_t value.

System Requirements:

No special requirements.

- Download strongSwan 4.3.4 free