The Libreswan Project

Encrypting the Internet with IKE and IPsec

Technologies
c, python, shell script, qemu
Topics
ipsec vpn
Encrypting the Internet with IKE and IPsec

Libreswan implements the IKE and IPsec standards for VPN. These standards have been created and are still maintained at the Internet Engineering Task Force (IETF) in the IPsecME Working Group. Libreswan is used as a remote access VPN as well as cloud encryption. It is known for its goal of Opportunistic Encryption which aims to encrypt the entire internet by default.

2018 Program

Successful Projects

Contributor
Sahana Prasad
Mentor
Paul Wouters
Organization
The Libreswan Project
Extend RFC-7427 Signature Authentication support to IKEv2 with ECC / EDDSA support
Libreswan itself currently only supports RSA as Digital Signature Authentication method, so it needs to be extended internally as well to be able to...
Contributor
Vukašin Karadžić
Mentor
Paul Wouters, Tuomo Soini
Organization
The Libreswan Project
Implementing “Group Key Management using IKEv2” IETF draft, RFC 5685 - “Redirect Mechanism for IKEv2” and/or RFC 5723 - “IKEv2 Session Resumption”
This project is sort of a hybrid project and it consists of implementation of atleast two out of three IETF RFCs/Drafts. The three features in...
Contributor
Rishabh Chaudhary
Mentor
Kim B. Heino, Tuomo Soini
Organization
The Libreswan Project
Web based Certificate and Profile User Interface
There are shell scripts for creating X.509 certificates, revoking certificates and signing CRLs and scripts for the creation of Profile certificate...