BSD Portssecurity/ipsec-tools 0.8.2_13 FreeBSD
KAME racoon IKE daemon, ipsec-tools version
- System
- FreeBSD
- Repository
- FreeBSD ports
- Maintainer
- [email protected]
- License
- BSD3CLAUSE
- Categories
- security
- Package size
- 355.9 KiB, 1059.7 KiB installed
Description
racoon speaks IKE (ISAKMP/Oakley) key management protocol, to establish security association with other hosts.
This is the IPSec-tools version of racoon.
Enchancements:
- Support of NAT-T and IKE fragmentation.
- Support of many authentication algorithms.
- Tons of bugfixes.
Known issues:
- Non-threaded implementation. Simultaneous key negotiation performance should be improved.
- Cannot negotiate keys for per-socket policy.
- Cryptic configuration syntax - blame IPsec specification too...
- Needs more documentation.
Design choice, not a bug:
- racoon negotiate IPsec keys only. It does not negotiate policy. Policy must be configured into the kernel separately from racoon. If you want to support roaming clients, you may need to have a mechanism to put policy for the roaming client after phase 1 finishes.
In the other systems
| System | Port | Version |
|---|---|---|
| FreeBSD | security/ipsec-tools | 0.8.2_13 |
| MidnightBSD | security/ipsec-tools | 0.8.2_2 |
Install
Binary package:
pkg install ipsec-toolsFrom the ports tree:
cd /usr/ports/security/ipsec-tools/ && make install cleanTo depend on this port in another port's Makefile:
RUN_DEPENDS= ipsec-tools>0:security/ipsec-tools
LIB_DEPENDS= libipsec.so:security/ipsec-toolsPackages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | aarch64 | amd64 | armv6 | armv7 | i386 |
|---|---|---|---|---|---|
| FreeBSD:14:latest | 0.8.2_13 | 0.8.2_13 | 0.8.2_12 | 0.8.2_13 | 0.8.2_13 |
| FreeBSD:14:quarterly | 0.8.2_13 | 0.8.2_13 | n/a | 0.8.2_13 | 0.8.2_13 |
| FreeBSD:15:latest | 0.8.2_13 | 0.8.2_13 | n/a | 0.8.2_13 | - |
| FreeBSD:15:quarterly | 0.8.2_13 | 0.8.2_13 | n/a | n/a | n/a |
| FreeBSD:16:latest | 0.8.2_13 | 0.8.2_13 | n/a | n/a | n/a |
| FreeBSD:16:quarterly | n/a | n/a | n/a | n/a | n/a |
Dependencies
The Makefile names none itself; they come from USES and USE_*.
The full lists below include those, and their dependencies in turn.
No port depends on this one.
Configuration
Options name: security_ipsec-tools
| Option | Default | Description |
|---|---|---|
| ADMINPORT | on | Enable Admin port |
| DOCS | off | Build and/or install documentation |
| DPD | on | Dead Peer Detection |
| EXAMPLES | off | Build and/or install examples |
| FRAG | on | IKE fragmentation payload support |
| GSSAPI | off | GSSAPI Security API support |
| HYBRID | on | Hybrid, Xauth and Mode-cfg support |
| IDEA | off | IDEA encryption (patented) |
| IPV6 | off | IPv6 protocol support |
| LDAP | off | LDAP authentication (Xauth server) |
| NATT | on | NAT-Traversal |
| PAM | off | PAM authentication (Xauth server) |
| RADIUS | off | Radius authentication (Xauth server) |
| RC5 | off | RC5 encryption (patented) |
| SAUNSPEC | off | Unspecified SA mode |
| STATS | off | Statistics logging function |
| WCPSKEY | on | Allow wildcard matching for pre-shared keys |
- USES
- compiler cpe libtool tar:bzip2 ssl
- Service scripts
racoon- Conflicts with
- racoon
Files
Manual pages 7
- ipsec_set_policy(3)
- ipsec_strerror(3)
- plainrsa-gen(8)
- racoon(8)
- racoon.conf(5)
- racoonctl(8)
- setkey(8)
pkg-plist 37
- sbin/plainrsa-gen
- sbin/racoon
- sbin/racoonctl
- sbin/setkey
- include/libipsec/libpfkey.h
- include/racoon/admin.h
- include/racoon/evt.h
- include/racoon/gcmalloc.h
- include/racoon/ipsec_doi.h
- include/racoon/isakmp.h
- include/racoon/isakmp_cfg.h
- include/racoon/isakmp_unity.h
- include/racoon/isakmp_var.h
- include/racoon/isakmp_xauth.h
- include/racoon/misc.h
- include/racoon/racoonctl.h
- include/racoon/schedule.h
- include/racoon/sockmisc.h
- include/racoon/var.h
- include/racoon/vmbuf.h
- lib/libipsec.a
- lib/libipsec.so
- lib/libipsec.so.0
- lib/libipsec.so.0.0.1
- lib/libracoon.a
- lib/libracoon.so
- lib/libracoon.so.0
- lib/libracoon.so.0.0.0
- share/man/man3/ipsec_set_policy.3.gz
- share/man/man3/ipsec_strerror.3.gz
- share/man/man5/racoon.conf.5.gz
- share/man/man8/plainrsa-gen.8.gz
- share/man/man8/racoon.8.gz
- share/man/man8/racoonctl.8.gz
- share/man/man8/setkey.8.gz
- @dir etc/racoon
- @dir
distinfo 1
| File | Size | SHA256 |
|---|---|---|
| ipsec-tools-0.8.2.tar.bz2 | 866465 | 8eb6b38716e2f3a8a72f1f549c9444c2bc28d52c9536792690564c74fe722f2d |
Master sites 1
- SF
Commit history 0
No commits in the history this site was built from.