{"id":13420368,"url":"https://github.com/libreswan/libreswan","last_synced_at":"2025-12-17T05:39:33.665Z","repository":{"id":7038866,"uuid":"8315473","full_name":"libreswan/libreswan","owner":"libreswan","description":"libreswan","archived":false,"fork":false,"pushed_at":"2025-03-14T16:13:04.000Z","size":187002,"stargazers_count":878,"open_issues_count":556,"forks_count":227,"subscribers_count":53,"default_branch":"main","last_synced_at":"2025-03-14T17:25:33.072Z","etag":null,"topics":["ipsec"],"latest_commit_sha":null,"homepage":"https://libreswan.org/","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":"bumptech/glide","license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/libreswan.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES","contributing":null,"funding":null,"license":"COPYING","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2013-02-20T15:09:06.000Z","updated_at":"2025-03-14T16:13:08.000Z","dependencies_parsed_at":"2025-03-06T21:36:27.385Z","dependency_job_id":null,"html_url":"https://github.com/libreswan/libreswan","commit_stats":{"total_commits":28806,"total_committers":203,"mean_commits":141.9014778325123,"dds":0.6270568631535096,"last_synced_commit":"1cb805170a8cdfd112b7d55545f83cdd72d37071"},"previous_names":[],"tags_count":296,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/libreswan%2Flibreswan","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/libreswan%2Flibreswan/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/libreswan%2Flibreswan/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/libreswan%2Flibreswan/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/libreswan","download_url":"https://codeload.github.com/libreswan/libreswan/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243695456,"owners_count":20332622,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ipsec"],"created_at":"2024-07-30T22:01:32.216Z","updated_at":"2025-12-17T05:39:33.622Z","avatar_url":"https://github.com/libreswan.png","language":"C","funding_links":[],"categories":["TODO scan for Android support in followings","\u003ca id=\"89e277bca2740d737c1aeac3192f374c\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"203d00ef3396d68f5277c90279f4ebf3\"\u003e\u003c/a\u003e新添加"],"readme":"# Libreswan\n\nThe Libreswan Project   https://libreswan.org/\n\nLibreswan is an Internet Key Exchange (IKE) implementation for Linux,\nFreeBSD, NetBSD and OpenBSD.  It supports IKEv1 and IKEv2 and has\nsupport for most of the extensions (RFC + IETF drafts) related to\nIPsec, including IKEv2, X.509 Digital Certificates, NAT Traversal, and\nmany others.\n\nLibreswan was forked from Openswan 2.6.38, which was forked from\nFreeS/WAN 2.04.  See the CREDITS files for contributor\nacknowledgments.\n\nIt can be downloaded from:\n\n    https://download.libreswan.org/\n\nA Git repository is available at:\n\n    https://github.com/libreswan/libreswan/\n\n## License\n\nThe bulk of libreswan is licensed under the GNU General Public License\nversion 2; see the LICENSE and CREDIT.* files.  Some smaller parts\nhave a different license.\n\n## Installing\n\nA pre-built Libreswan package is available on the following OS\ndistributions: RHEL, Fedora, CentOS, Ubuntu, Debian, Arch, Apline,\nOpenWrt and FreeBSD.  On NetBSD the package sources are in\nwip/libreswan.\n\nUnless a source-based build is truly needed,  it is often best to use\nthe pre-built version of the distribution you are using.\n\n## Installing from Source\n\n### Requirements\n\nThere are a few packages required for Libreswan to compile from source:\n\nFor Debian/Ubuntu\n\n    apt-get install net-tools make build-essential \\\n      libnss3-dev pkg-config libevent-dev libunbound-dev \\\n      bison flex libsystemd-dev libcurl4-nss-dev \\\n      libpam0g-dev libcap-ng-dev libldns-dev xmlto\n\nFor Fedora/CentOS-Stream/RHEL/AlmaLinux/RockyLinux etc.\n\n    dnf install audit-libs-devel bison curl-devel flex \\\n      gcc ldns-devel libcap-ng-devel libevent-devel \\\n      libseccomp-devel libselinux-devel make nspr-devel \\\n      nss-devel pam-devel pkgconfig systemd-devel \\\n      unbound-devel xmlto\n\nAlpine Linux:\n\n    aph add mandoc mandoc-doc apk-tools-doc bison \\\n      bison-doc bsd-compat-headers coreutils coreutils-doc \\\n      curl-dev curl-doc flex flex-doc gcc gcc-doc git git-doc \\\n      gmp-dev gmp-doc ldns-dev ldns-doc libcap-ng-dev \\\n      libcap-ng-doc libevent-dev linux-pam-dev linux-pam-doc \\\n      make make-doc musl-dev nspr-dev nss-dev nss-tools \\\n      pkgconfig sed sed-doc unbound-doc unbound-dev \\\n      xmlto xmlto-doc\n\nFreeBSD:\n\n    pkg install gmake git pkgconf nss libevent unbound bison \\\n      flex ldns xmlto gcc\n\nNetBSD:\n\n    pkgin install git gmake nss unbound bison flex ldns xmlto pkgconf\n\nOpenBSD:\n\n    pkg_add gmake nss libevent libunbound bison libldns xmlto \\\n      curl git llvm%16\n\n### Building for RPM based systems\n\nInstall requirements for rpm package building:\n\n    dnf install rpm-build rpmdevtools\n\nThe packaging/ directory is used to find the proper spec file for your\ndistribution.  Simply issue the command:\n\n    make rpm\n\nYou can also pick a specific spec file.  For example, to build for\nCentOS8, use:\n\n    rpmbuild -ba packaging/centos/8/libreswan.spec\n\n### Building for DEB based systems\n\nThe packaging/debian directory is used to build deb files.  Simply\nissue the command:\n\n    make deb\n\n### Building from scratch into /usr/local\n\nGNU Make is used:\n\n    gmake\n    sudo gmake install\n\nIf you want to build without creating and installing manual pages, run:\n\n    gmake base\n    sudo gmake install-base\n\n## Starting Libreswan\n\nThe install will detect the init system used (systemd, upstart,\nsysvinit, openrc) and should integrate with the linux distribution.\nThe service name is called \"ipsec\".  For example, on CentOS Stream 9,\none would use:\n\n    systemctl enable ipsec.service\n    systemctl start ipsec.service\n\nIf unsure of the specific init system used on the system, the \"ipsec\"\ncommand can also be used to start or stop the ipsec service.  This\ncommand will auto-detect the init system and invoke it:\n\n    ipsec start\n    ipsec stop\n\n## Status\n\nFor a connection status overview, use:\n\n    ipsec trafficstatus\n\nFor a brief status overview, use:\n\n    ipsec briefstatus\n\nFor a machine readable global status, use:\n\n    ipsec globalstatus\n\n## Configuration\n\nMost of the libreswan configuration is stored in /etc/ipsec.conf and\n/etc/ipsec.secrets .  Include files may be present in /etc/ipsec.d/\nSee the respective man pages for more information.\n\n## NSS initialisation\n\nLibreswan uses NSS to store private keys and X.509 certificates.  The\nNSS database should have been initialised by the package installer.\nIf not, the NSS database can be initialised using:\n\n    ipsec initnss\n\nPKCS#12 certificates (.p12 files) can be imported using:\n\n    ipsec import /path/to/your.p12\n\nSee README.NSS and `certutil --help` for more details on using NSS and\nmigrating from the old Openswan `/etc/ipsec.d/` directories to using\nNSS.\n\n## Upgrading\n\nIf you are upgrading from older Libreswan versions, Libreswan 5.x you\nmight need to adjust your config files, although great care has been\nput into making the configuration files full backwards compatible.\n\nSee 'man ipsec.conf' for the list of options to find any new features.\n\nYou can run `make install` on top of your old version - it will not\noverwrite your your `/etc/ipsec.*` configuration files.  The default\ninstall target installs in `/usr/local`.  Ensure you do not install\nlibreswan twice, one from a distribution package in /usr and once\nmanually in /usr/local.\n\nNote that for rpm based systems, the NSS directory changed from\n/etc/ipsec.d to /var/lib/ipsec/nss/\n\n## Help\n\nMailing lists:\n\nThe mailing lists, including archives are at\nhttps://lists.libreswan.org/\n\nWiki:\n\nLibreswan's wiki is at https://libreswan.org/wiki/Main_Page.  It\ncontains documentation, interop guides and other useful information.\n\nIRC:\n\nLibreswan developers and users can be found on IRC, on\nirc.libera.chat #libreswan\n\n## Bugs\n\nBugs can be reported on the mailing list swan-dev@lists.libreswan.org\nor using our bug tracking system, at:\n\n    https://github.com/libreswan/libreswan/issues\n\n## Security Information\n\nAll security issues found that require public disclosure will receive\nproper CVE tracking numbers (see https://www.mitre.org/) and will be\nco-ordinated via the vendor-sec / oss-security lists.  A complete list\nof known security vulnerabilities is available at:\n\n    https://libreswan.org/security/\n\nPlease contact security@libreswan.org or:\n\n    https://github.com/libreswan/libreswan/security\n\nif you suspect you have found a security issue or vulnerability in\nlibreswan.  Encrypted email can be received encrypted to the libreswan\nOpenPGP key.  We strongly encourage you to report potential security\nvulnerabilities to us before disclosing them in a public forum or in a\npublic security paper or conference.\n\n## Development\n\nThose interested in the development, patches, and beta releases of\nLibreswan can join the development mailing list\nswan-dev@lists.libreswan.org or talk to the development team on IRC in\n#libreswan on irc.libera.chat\n\nFor those who want to track things a bit more closely, the\nswan-commits@lists.libreswan.org mailing list will mail all the commit\nmessages when they happen.  This list is quite busy during active\ndevelopment periods.\n\n## Documentation\n\nThe most up to date documentation consists of the man pages that come\nwith the software.  Further documentation can be found at:\n\n    https://libreswan.org/\n\nand the wiki at:\n\n    https://libreswan.org/wiki/\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flibreswan%2Flibreswan","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Flibreswan%2Flibreswan","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Flibreswan%2Flibreswan/lists"}