Student projects
Jump to navigation
Jump to search
Introduction
The Libreswan Project invites students to work on the libreswan code base. It offers to mentor the students. Please contact Paul Wouters if you are a student or school that is interested. For ideas of items to work on, please see GSoC.
Below is a list of completed student projects. If you are interested in participating as a student, please contact us.
Libreswan Opportunistic IPsec using LetsEncrypt
- Student: Rishabh - sponsored by Google Summer of Code 2019
- Project Page: Libreswan Opportunistic IPsec using LetsEncrypt
- Documentation page: Documentation: Libreswan Opportunistic IPsec using LetsEncrypt
- Status: Development Complete, Merged in master branch. Released in Libreswan v3.30.
RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Student: Sahana Prasad - sponsored by Google summer of code 2018
- Project page: RSA-PSS Support in compliance with RFC 7427 and RFC 8247
- Status: Merged and released in Libreswan 3.25
Extend RFC 7427 Signature Authentication support to IKEv2 with ECDSA
- Student: Sahana Prasad - sponsored by Google Summer of Code 2018
- Project page: Extend RFC-7427 Signature Authentication support to IKEv2 with ECDSA
- Status: Merged and released in libreswan 3.27
RFC 5685 IKEv2 Redirect Mechanism
- Student: Vukasin Karadzic - sponsored by Google Summer of Code 2018
- Project Page: RFC 5685 - Redirect Mechanism
- Status: Merged and released in libreswan 3.28
Libreswan Managing Interface
- Student: Rishabh - sponsored by Google Summer of Code 2018
- Project Page: Libreswan Managing Interface
- Status: Development complete, waiting for the release.
RFC 7427 Signature Authentication in the Internet Key Exchange Version 2 (IKEv2)
- Student: Sahana Prasad - sponsored by Google Summer of Code 2017
- Project page: Compliance of RFC 7427 - Signature Authentication in IKEv2
- Status: Initial framework implemented to support RSA v1.5 with SHA-1 signatures and RSA-PKK with SHA-2 signatures
- Code: Merged and released in libreswan 3.22, extended for authby=rsa-sha2 and RSA-PKK in 3.23
RFC 8229 TCP Encapsulation of IKE and IPsec Packets
- Student: Mayank Totale - sponsored by Google Summer of Code 2017
- Project Page: GSOC 2017: Implementing RFC 8229 "TCP Encapsulation of IKE and IPsec Packets" for Libreswan
- Status: Waiting on Linux kernel support for ESPinTCP. IKEinTCP code has been implemented in libreswan
- Student: Vukasin Karadzic - sponsored by The Libreswan Project in 2017
- Project Page: Postquantum Preshared Keys
- Status: Passed vendor interop testing
- Code: Merged and released in libreswan 3.23