Warning: file_exists(): open_basedir restriction in effect. File(/srv/http/vhosts/aur.archlinux.org/public/web/locale//en/LC_MESSAGES/aurweb.mo) is not within the allowed path(s): (/srv/http/vhosts/aur-dev.archlinux.org/:/etc/aurweb/) in /srv/http/vhosts/aur-dev.archlinux.org/public/web/lib/streams.php on line 90
AUR (en) - strongswan

Notice: Undefined variable: name in /srv/http/vhosts/aur-dev.archlinux.org/public/web/lib/pkgfuncs.inc.php on line 248

Package Details: strongswan 5.5.1-5

Git Clone URL: https://aur-dev.archlinux.org/strongswan.git (read-only)
Package Base: strongswan
Description: open source IPsec implementation
Upstream URL: http://www.strongswan.org
Keywords: IPsec strongswan
Licenses: GPL
Conflicts: openswan
Submitter: jayray
Maintainer: Thermi
Last Packager: Thermi
Votes: 99
Popularity: 2.646251
First Submitted: 2007-04-22 16:41
Last Updated: 2017-02-04 18:22

Latest Comments

« First ‹ Previous ... 2 3 4 5 6 7 8 9 10 11 12 Next › Last »

Thermi commented on 2015-01-06 16:01

5.2.2 is out with a patch for a DOS vulnerability. Please upgrade the package ASAP.

mys_721tx commented on 2014-12-29 15:57

It is possible to use the official systemd unit files and ditch the rc.


dkorzhevin commented on 2014-10-26 19:38


I finished testing of 5.2.1 and will update in a day.

frol commented on 2014-09-20 00:21

It builds and works well on armv7l and armv7h kernels so you might add those to the arch list.

andrej commented on 2014-09-06 03:56

Hi, strongswan 5.2 and later has a bug that affects IPv6 tunnels, making them nearly unusable for outgoing connections (valid lifetime is set to 0).

Fortunately there's a temporary fix for the issue; please see my detailed comment under https://aur.archlinux.org/packages/strongswan-git/

The long story short: git revert 90854d28

dkorzhevin commented on 2014-07-23 21:45

Updated to latest stable strongswan 5.2.0

autama commented on 2014-05-13 16:30

I tried on another PC to be shure not to have bad config files,
just did a "yaourt -S strongswan" and "ipsec start"
journal shows:
charon[672]: 00[LIB] loaded plugins: charon curl sqlite aes des rc2 sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1
so no eap-mchap plugin.

When i edit the PKGBUILD to include --enable-md4
and compile + install i get:
loaded plugins: charon curl sqlite aes des rc2 sha1 sha2 md4 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp xcbc cmac hmac attr kernel-netlink resolve socket-default farp stroke updown eap-identity eap-sim eap-aka eap-aka-3gpp2 eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-mschapv2 eap-radius xauth-generic xauth-eap dhcp

in journal, so i'm quite sure it is needed (or there is some magic that doesn't work for me ;-) ).

pvliesdonk commented on 2014-05-13 09:11

In my build (from this package) mschapv2 works just fine. MD4 is pulled in automatically.

autama commented on 2014-05-13 07:53

When using eap-mschapv2 you need to add --enable-md4 to ./configure.
(maybe that could be added to the Package as well).


PattPatel commented on 2014-05-11 10:01

I'm sorry, it was just me. I was coming from a previous version and something got broken. I had a mistaken version of libstrongswan.so that pacman couldn't delete. Fully removing it and cleaning my system did the trick. (This happened on three different Arch setups)