BSD Portssecurity/ipsec-tools 0.8.2_2 MidnightBSD
KAME racoon IKE daemon, ipsec-tools version
- System
- MidnightBSD
- Repository
- mports
- Maintainer
- [email protected]
- License
- bsd3
- Categories
- security
Description
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish security association with other hosts.
This is the IPSec-tools version of racoon.
Enchancements:
- Support of NAT-T and IKE fragmentation.
- Support of many authentication algorithms.
- Tons of bugfixes.
Known issues:
- Non-threaded implementation. Simultaneous key negotiation performance should be improved.
- Cannot negotiate keys for per-socket policy.
- Cryptic configuration syntax - blame IPsec specification too...
- Needs more documentation.
Design choice, not a bug:
- racoon negotiate IPsec keys only. It does not negotiate policy. Policy must be configured into the kernel separately from racoon. If you want to support roaming clients, you may need to have a mechanism to put policy for the roaming client after phase 1 finishes.
In the other systems
| System | Port | Version |
|---|---|---|
| MidnightBSD | security/ipsec-tools | 0.8.2_2 |
| FreeBSD | security/ipsec-tools | 0.8.2_13 |
| HardenedBSD | security/ipsec-tools | 0.8.2_13 |
| GhostBSD | security/ipsec-tools | 0.8.2_13 |
Install
Binary package:
mport install ipsec-toolsFrom mports:
cd /usr/mports/security/ipsec-tools && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= ipsec-tools>0:security/ipsec-tools
LIB_DEPENDS= libipsec.so:security/ipsec-toolsDependencies
No port depends on this one.
Configuration
Options name: security_ipsec-tools
| Option | Default | Description |
|---|---|---|
| ADMINPORT | off | Enable Admin port |
| DOCS | off | |
| DPD | on | Dead Peer Detection |
| EXAMPLES | off | |
| FRAG | on | IKE fragmentation payload support |
| GSSAPI | off | |
| HYBRID | on | Hybrid, Xauth and Mode-cfg support |
| IDEA | off | IDEA encryption (patented) |
| IPV6 | off | |
| LDAP | off | LDAP authentication (Xauth server) |
| NATT | off | NAT-Traversal (kernel-patch required) |
| PAM | off | PAM authentication (Xauth server) |
| RADIUS | off | Radius authentication (Xauth server) |
| RC5 | off | RC5 encryption (patented) |
| SAUNSPEC | off | Unspecified SA mode |
| STATS | off | Statistics logging function |
| WCPSKEY | off | Allow wildcard matching for pre-shared keys |
- USES
- cpe libtool tar:bzip2 ssl
- Service scripts
racoon- Conflicts with
- racoon-[0-9]*
Files
Manual pages 7
- ipsec_set_policy(3)
- ipsec_strerror(3)
- plainrsa-gen(8)
- racoon(8)
- racoon.conf(5)
- racoonctl(8)
- setkey(8)
pkg-plist 37
- sbin/plainrsa-gen
- sbin/racoon
- sbin/racoonctl
- sbin/setkey
- include/libipsec/libpfkey.h
- include/racoon/admin.h
- include/racoon/evt.h
- include/racoon/gcmalloc.h
- include/racoon/ipsec_doi.h
- include/racoon/isakmp.h
- include/racoon/isakmp_cfg.h
- include/racoon/isakmp_unity.h
- include/racoon/isakmp_var.h
- include/racoon/isakmp_xauth.h
- include/racoon/misc.h
- include/racoon/racoonctl.h
- include/racoon/schedule.h
- include/racoon/sockmisc.h
- include/racoon/var.h
- include/racoon/vmbuf.h
- lib/libipsec.a
- lib/libipsec.so
- lib/libipsec.so.0
- lib/libipsec.so.0.0.1
- lib/libracoon.a
- lib/libracoon.so
- lib/libracoon.so.0
- lib/libracoon.so.0.0.0
- share/man/man3/ipsec_set_policy.3.gz
- share/man/man3/ipsec_strerror.3.gz
- share/man/man5/racoon.conf.5.gz
- share/man/man8/plainrsa-gen.8.gz
- share/man/man8/racoon.8.gz
- share/man/man8/racoonctl.8.gz
- share/man/man8/setkey.8.gz
- @dir etc/racoon
- @dir
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| ipsec-tools-0.8.2.tar.bz2 | 866465 | 8eb6b38716e2f3a8a72f1f549c9444c2bc28d52c9536792690564c74fe722f2d |
Master sites 1
- SF