Main Page

The Libreswan Project

User Documentation

• Introduction
• Configuration examples
• Manual pages
• Additional ipsec.conf documentation
• Interoperability
• FAQ
• Tips and Tricks

Upgrading Documentation

• HOWTO: Using NSS with libreswan
• HOWTO: openswan to libreswan migration

Cloud and mesh deployments

• HOWTO: Opportunistic IPsec
• HOWTO: Unauthenticated Opportunistic IPsec
• HOWTO: Opportunistic IPsec using LetsEncrypt
• HOWTO: Unauthenticated Opportunistic IPsec
• HOWTO: OpenShift cloud encryption using Opportunistic IPsec
• OpenShift Cloud Encryption with libreswan
• HOWTO: Route-based VPN using VTI

• Benchmarking and Performance testing
• OCF Hardware crypto acceleration
• Entropy matters

Upgrade Information

• 3.14 X509
• 3.14 on Debian Wheezy

Presentations

• DevConf.cz 2016 Presentation by Paul Wouters (slides: DevConf2016-IPsec.pdf and Video) (video starts around 45 minute mark)
• Linux Securit Summit 2017 Presentation by Paul Wouters Slides and Video

Developer documentation

Building and installing from source Cross Compiling Bug Tracker Test Suite Test Suite - valgrind Test Suite - Docker pluto internals KLIPS Meetings RFC List IKEv2 Child SA IKEv2 CP and EAP support Discouraged or forbidden C functions Compiling with AddressSanitizer

The Libreswan Team at IETF90 in Toronto Antony, Tuomo, Kim, Richard, Hugh, Matt and Paul

The Libreswan developers can be reached on the swan-dev mailing list or via IRC on the #swan channel at the FreeNode IRC network.

Other

• History
• Administrivia
• Other links