BSD Ports

security/strongswan 6.1.0 FreeBSD

Open Source IKEv2 IPsec-based VPN solution

System
FreeBSD
Repository
FreeBSD ports
Maintainer
[email protected]
Last update
Commit
5a7f75878c
License
GPLv2
Categories
security, net-vpn
Package size
866.4 KiB, 2791.0 KiB installed

Description

Strongswan is an open source IPsec-based VPN solution. Strongswan for FreeBSD implements both the IKEv1 and IKEv2 (RFC 5996) key exchange protocols.

In the other systems

SystemPortVersion
FreeBSDsecurity/strongswan6.1.0
OpenBSDnet/strongswan5.9.1p0

Install

Binary package:

pkg install strongswan

From the ports tree:

cd /usr/ports/security/strongswan/ && make install clean

To depend on this port in another port's Makefile:

RUN_DEPENDS=	strongswan>0:security/strongswan

Packages

The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.

Repositoryaarch64amd64armv6armv7i386
FreeBSD:14:latest6.1.06.1.05.9.8_16.0.16.1.0
FreeBSD:14:quarterly6.1.06.1.0n/a6.0.16.1.0
FreeBSD:15:latest6.1.06.1.0n/a6.0.16.0.1
FreeBSD:15:quarterly6.1.06.1.0n/an/an/a
FreeBSD:16:latest6.1.06.1.0n/an/an/a
FreeBSD:16:quarterlyn/an/an/an/an/a

Dependencies

The Makefile names none itself; they come from USES and USE_*.

The full lists below include those, and their dependencies in turn.

Build dependencies 11
Run dependencies 10

No port depends on this one.

Configuration

Options name: security_strongswan

OptionDefaultDescription
BUILTINonUse builtin printf hooks
CTRoffEnable CTR cipher mode wrapper plugin
CURLonEnable CURL to fetch CRL/OCSP
DHCPoffEnable DHCP based attribute provider plugin
EAPAKA3GPP2offEnable EAP AKA with 3gpp2 backend
EAPDYNAMICoffEnable EAP dynamic proxy module
EAPRADIUSoffEnable EAP Radius proxy authentication
EAPSIMFILEoffEnable EAP SIM with file backend
FARPoffEnable farp plugin
FIPS_PRFoffEnable FIPS PRF software implementation plugin
GCMonEnable GCM AEAD wrapper crypto plugin
IKEV1onEnable IKEv1 support
IPSECKEYoffEnable authentication with IPSECKEY resource records with DNSSEC
KDFonEnable KDF (prf+) implementation plugin
KERNELLIBIPSEConEnable IPSec userland backend
LDAPoffLDAP protocol support
LIBCoffUse libc printf hooks
LOADTESTERoffEnable load testing plugin
MEDIATIONoffEnable IKEv2 Mediation Extension
MLonEnable Module-Lattice-based crypto plugin
MYSQLoffMySQL database support
PKCS11offEnable PKCS11 token support
PKIonEnable PKI tools
PYTHONoffPython VICI protocol plugin
SMPoffEnable XML-based management protocol (DEPRECATED)
SQLITEoffSQLite database support
STROKEoffEnable stroke management protcol (DEPRECATED)
SWANCTLonInstall swanctl (requires VICI)
TESTVECTORoffEnable crypto test vectors
TPMoffEnable TPM plugin
TSS2offEnable TPM 2.0 TSS2 library
UNBOUNDoffEnable DNSSEC-enabled resolver
UNITYoffEnable Cisco Unity extension plugin
VICIonEnable VICI management protocol
VSTRoffUse devel/vstr printf hooks
XAUTHoffEnable XAuth password verification
USES
cpe libtool:keepla pkgconfig ssl tar:bzip2
Service scripts
strongswan

Message after installing

The default strongSwan configuration interface have been updated to vici since version 5.9.2_1.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.

The default strongSwan configuration interface have been updated to vici.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.

Files

Manual pages 25
  • charon-cmd(8)
  • ipsec(8)
  • ipsec.conf(5)
  • ipsec.secrets(5)
  • pki(1)
  • pki---acert(1)
  • pki---dn(1)
  • pki---est(1)
  • pki---estca(1)
  • pki---gen(1)
  • pki---issue(1)
  • pki---keyid(1)
  • pki---ocsp(1)
  • pki---pkcs7(1)
  • pki---print(1)
  • pki---pub(1)
  • pki---req(1)
  • pki---scep(1)
  • pki---scepca(1)
  • pki---self(1)
  • pki---signcrl(1)
  • pki---verify(1)
  • strongswan.conf(5)
  • swanctl(8)
  • swanctl.conf(5)
pkg-plist 429
  • bin/pki
  • bin/tpm_extendpcr
  • @sample etc/strongswan.conf.sample
  • @sample etc/strongswan.d/charon-cmd.conf.sample
  • @sample etc/strongswan.d/charon-cmd/cmac.conf.sample
  • @sample etc/strongswan.d/charon-cmd/constraints.conf.sample
  • @sample etc/strongswan.d/charon-cmd/ctr.conf.sample
  • @sample etc/strongswan.d/charon-cmd/curl.conf.sample
  • @sample etc/strongswan.d/charon-cmd/drbg.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-identity.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-md5.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-mschapv2.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-peap.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-tls.conf.sample
  • @sample etc/strongswan.d/charon-cmd/eap-ttls.conf.sample
  • @sample etc/strongswan.d/charon-cmd/fips-prf.conf.sample
  • @sample etc/strongswan.d/charon-cmd/gcm.conf.sample
  • @sample etc/strongswan.d/charon-cmd/gmp.conf.sample
  • @sample etc/strongswan.d/charon-cmd/kdf.conf.sample
  • @sample etc/strongswan.d/charon-cmd/kernel-libipsec.conf.sample
  • @sample etc/strongswan.d/charon-cmd/kernel-pfkey.conf.sample
  • @sample etc/strongswan.d/charon-cmd/kernel-pfroute.conf.sample
  • @sample etc/strongswan.d/charon-cmd/ldap.conf.sample
  • @sample etc/strongswan.d/charon-cmd/md4.conf.sample
  • @sample etc/strongswan.d/charon-cmd/mgf1.conf.sample
  • @sample etc/strongswan.d/charon-cmd/ml.conf.sample
  • @sample etc/strongswan.d/charon-cmd/nonce.conf.sample
  • @sample etc/strongswan.d/charon-cmd/openssl.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pem.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pkcs1.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pkcs11.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pkcs7.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pkcs8.conf.sample
  • @sample etc/strongswan.d/charon-cmd/pubkey.conf.sample
  • @sample etc/strongswan.d/charon-cmd/random.conf.sample
  • @sample etc/strongswan.d/charon-cmd/resolve.conf.sample
  • @sample etc/strongswan.d/charon-cmd/revocation.conf.sample
  • @sample etc/strongswan.d/charon-cmd/socket-default.conf.sample
  • @sample etc/strongswan.d/charon-cmd/sshkey.conf.sample
  • @sample etc/strongswan.d/charon-cmd/tpm.conf.sample
  • @sample etc/strongswan.d/charon-cmd/x509.conf.sample
  • @sample etc/strongswan.d/charon-cmd/xauth-generic.conf.sample
  • @sample etc/strongswan.d/charon-cmd/xcbc.conf.sample
  • @sample etc/strongswan.d/charon-logging.conf.sample
  • @sample etc/strongswan.d/charon.conf.sample
  • @sample etc/strongswan.d/charon/addrblock.conf.sample
  • @sample etc/strongswan.d/charon/attr-sql.conf.sample
  • @sample etc/strongswan.d/charon/attr.conf.sample
  • @sample etc/strongswan.d/charon/cmac.conf.sample
  • @sample etc/strongswan.d/charon/constraints.conf.sample
  • @sample etc/strongswan.d/charon/counters.conf.sample
  • @sample etc/strongswan.d/charon/ctr.conf.sample
  • @sample etc/strongswan.d/charon/curl.conf.sample
  • etc/strongswan.d/charon/dhcp.conf.sample
  • @sample etc/strongswan.d/charon/dnskey.conf.sample
  • @sample etc/strongswan.d/charon/drbg.conf.sample
  • @sample etc/strongswan.d/starter.conf.sample
  • @sample etc/strongswan.d/charon/eap-aka-3gpp2.conf.sample
  • @sample etc/strongswan.d/charon/eap-aka.conf.sample
  • @sample etc/strongswan.d/charon/eap-dynamic.conf.sample
  • @sample etc/strongswan.d/charon/eap-identity.conf.sample
  • @sample etc/strongswan.d/charon/eap-md5.conf.sample
  • @sample etc/strongswan.d/charon/eap-mschapv2.conf.sample
  • @sample etc/strongswan.d/charon/eap-peap.conf.sample
  • @sample etc/strongswan.d/charon/eap-radius.conf.sample
  • @sample etc/strongswan.d/charon/eap-sim-file.conf.sample
  • @sample etc/strongswan.d/charon/eap-sim.conf.sample
  • @sample etc/strongswan.d/charon/eap-tls.conf.sample
  • @sample etc/strongswan.d/charon/eap-ttls.conf.sample
  • @sample etc/strongswan.d/charon/farp.conf.sample
  • @sample etc/strongswan.d/charon/fips-prf.conf.sample
  • @sample etc/strongswan.d/charon/gcm.conf.sample
  • @sample etc/strongswan.d/charon/gmp.conf.sample
  • @sample etc/strongswan.d/charon/ipseckey.conf.sample
  • @sample etc/strongswan.d/charon/kdf.conf.sample
  • @sample etc/strongswan.d/charon/kernel-libipsec.conf.sample
  • @sample etc/strongswan.d/charon/kernel-pfkey.conf.sample
  • @sample etc/strongswan.d/charon/kernel-pfroute.conf.sample
  • @sample etc/strongswan.d/charon/ldap.conf.sample
  • @sample etc/strongswan.d/charon/load-tester.conf.sample
  • @sample etc/strongswan.d/charon/md4.conf.sample
  • @sample etc/strongswan.d/charon/mgf1.conf.sample
  • @sample etc/strongswan.d/charon/ml.conf.sample
  • @sample etc/strongswan.d/charon/mysql.conf.sample
  • @sample etc/strongswan.d/charon/nonce.conf.sample
  • @sample etc/strongswan.d/charon/openssl.conf.sample
  • @sample etc/strongswan.d/charon/padlock.conf.sample
  • @sample etc/strongswan.d/charon/pem.conf.sample
  • @sample etc/strongswan.d/charon/pgp.conf.sample
  • @sample etc/strongswan.d/charon/pkcs1.conf.sample
  • @sample etc/strongswan.d/charon/pkcs11.conf.sample
  • @sample etc/strongswan.d/charon/pkcs7.conf.sample
  • @sample etc/strongswan.d/charon/pkcs8.conf.sample
  • @sample etc/strongswan.d/charon/pubkey.conf.sample
  • @sample etc/strongswan.d/charon/random.conf.sample
  • @sample etc/strongswan.d/charon/resolve.conf.sample
  • @sample etc/strongswan.d/charon/revocation.conf.sample
  • @sample etc/strongswan.d/charon/smp.conf.sample
  • @sample etc/strongswan.d/charon/socket-default.conf.sample
  • @sample etc/strongswan.d/charon/sql.conf.sample

The first 100 are listed.

distinfo 1
FileSizeSHA256
strongswan-6.1.0.tar.bz24.620545e+06fe6c97481298767213cfc2e9a1da29fdd8018d481ff4cb9cf0283099654f20d4
Master sites 2
  • https://download.strongswan.org/
  • https://download2.strongswan.org/

Commit history 4

DateCommitCreditsLog message
5a7f75878c R. Christian McDonald security/strongswan: Update 6.0.7 => 6.1.0
Changelog: https://github.com/strongswan/strongswan/releases/tag/6.1.0 PR: 298372 MFH: 2026Q3 Security: CVE-2026-78123 Security: CVE-2026-78124 Security: CVE-2026-78126 Security: CVE-2026-78127 Security: CVE-2026-78129 Security: CVE-2026-78130 Security: CVE-2026-78131 Security: CVE-2026-78132 Security: CVE-2026-78133 Security: CVE-2026-78134 Security: CVE-2026-78135 Sponsored by: Rubicon Communications, LLC ("Netgate")
e0d875b0cc R. Christian McDonald security/strongswan: Take over maintainership
PR: 298404 Approved by: diizzy, vvd MFH: 2026Q3 Sponsored by: Rubicon Communications, LLC ("Netgate")
a01d6ba04a Oleksandr Kryvulia security/strongswan: Disable loading of kernel-libipsec plugin
115e0906c85a enables building with KERNELLIBIPSEC option by default. This changes loading order of plugins and brokes some existing configurations. PR: 298098 295828 Approved by: blanket (fix runtime) Sponsored by: FLEX-IT LLC Sponsored by: UNIS Labs (vvd, commit patch)
115e0906c8 Vladimir Druzenko security/strongswan: Enable KERNELLIBIPSEC option by default for vnet jail support
PR: 295828 Approved by: [email protected] (maintainer, timeout 3 months) Sponsored by: UNIS Labs