Main Page

The Libreswan Project

User Documentation

• Introduction
• Configuration examples
• Manual pages
• Additional ipsec.conf documentation
• Interoperability
• FAQ
• Tips and Tricks
• Cipher suites and algorithm support
• Hardware Tokens
• IRC

Upgrading Documentation

• HOWTO: Using NSS with libreswan
• HOWTO: openswan to libreswan migration

Cloud and mesh deployments

• HOWTO: Opportunistic IPsec
• HOWTO: Unauthenticated Opportunistic IPsec
• HOWTO: Opportunistic IPsec using LetsEncrypt
• HOWTO: OpenShift cloud encryption using Opportunistic IPsec
• OpenShift Cloud Encryption with libreswan
• HOWTO: Route-based VPN using VTI

• Benchmarking and Performance testing
• OCF Hardware crypto acceleration
• Entropy matters

Upgrade Information

• 3.14 X509
• 3.14 on Debian Wheezy
• 3.21 on Debian Wheezy

Presentations

• DevConf.cz 2016 Presentation by Paul Wouters (slides: DevConf2016-IPsec.pdf and Video) (video starts around 45 minute mark)
• Linux Securit Summit 2017 Presentation by Paul Wouters Slides and Video

Developer documentation

Building and installing from source Cross Compiling Setting up system for debug logging Bug Tracker Test Suite Test Suite - valgrind Test Suite - Docker Test Suite - Docker F25 Test Suite - 2017 NG pluto internals KLIPS Meetings RFC List IKEv2 Child SA IKEv2 CP and EAP support Discouraged or forbidden C functions Compiling with AddressSanitizer Distribution source repository Student projects Linux IPsec Summit 2018 wishlist Google Summer of Code 2018: GSoC2018 IKEv2 Protocol details ikev2details The Libreswan Team at IETF90 in Toronto Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul

The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #swan channel at the FreeNode IRC network.

Other

• History
• Administrivia
• Other links
• License of work inside the wiki