Add HOST-TO-HOST Support on BSD
Contributor: Amrinder Singh
The host to host ipsec transport mode works on Linux but does not work on any of the BSDs. The problem is a lack of IKE socket bypass , transport...
Security
The Libreswan Project
Encrypting the Internet with IKE / IPsec VPN
Technologies
CkernelkvmlibeventnamespacesnssPythonRFCsshell
Topics
encryptionikev2ipsecsecurityvpn
- Total projects
- 13
- Years participating
- 7
- Most recent
- 2026
Participation history
Historical projects
Add Support For Announcing Authentication Methods To Libreswan
Contributor: Osema Fadhel
Currently, during an IKEv2 negotiation in Libreswan, each peer independently selects its authentication method without knowing what the other side...
Optimising the lookup time for ACQUIRE messages sent by kernel
Contributor: Vinayak Sandur
When an IPsec-encrypted packet matches a trap policy in the kernel, the kernel notifies IKE daemon (Pluto) via an ACQUIRE Netlink message. Then Pluto...
No project records were included for this year.
Extend RFC-7427 Signature Authentication Support To IKEv2 With EDDSA Support
Contributor: Rishabh Kumar
The Internet Key Exchange Protocol Version 2 can use arbitrary signature algorithms for authentication as described in RFC-7427. Currently, Libreswan...
IKEv2 Interop testing with OpenBSD
Contributor: Ravi Teja CMS
IPSec standards are produced and maintained by Internet Engineering Task Force which are implemented by many software including Libreswan. OpenIKED...
Add Support for RFC 5723 'Session Resumption' and RFC 6023 'Childless Initiation of SA'
Contributor: Nupur Agrawal
The project involves work on adding support for RFC 5723 primarily. RFC 5723 proposes an extension to IKEv2 (Internet Key Exchange v2) that allows a...
INTERMEDIATE exchange for IKEv2
Contributor: Yulia Kuzovkova
Libreswan implements IPsec protocol, which uses IKEv2 for authentication and key establishment. IKEv2 uses the classical Diffie-Hellman key exchange...
Opportunistic IPsec development using LetsEncrypt
Contributor: Rishabh Chaudhary
Opportunistic IPsec is an attempt to encrypt the internet at large. The idea is to build VPN tunnels directly to all internet hosts irrespective of...
Extend RFC-7427 Signature Authentication support to IKEv2 with ECC / EDDSA support
Contributor: Sahana Prasad
Libreswan itself currently only supports RSA as Digital Signature Authentication method, so it needs to be extended internally as well to be able to...
Implementing “Group Key Management using IKEv2” IETF draft, RFC 5685 - “Redirect Mechanism for IKEv2” and/or RFC 5723 - “IKEv2 Session Resumption”
Contributor: Vukašin Karadžić
This project is sort of a hybrid project and it consists of implementation of atleast two out of three IETF RFCs/Drafts. The three features in...
Web based Certificate and Profile User Interface
Contributor: Rishabh Chaudhary
There are shell scripts for creating X.509 certificates, revoking certificates and signing CRLs and scripts for the creation of Profile certificate...
RFC-7427 Signature Authentication support to IKEv2 for Libreswan
Contributor: Sahana Prasad
Currently in IKEv2 , signature based authentication is per algorithm i.e., there is one for RSA digital signatures, one for DSS digital signatures...
Implement TCP Encapsulation of IKE and IPsec Packets
Contributor: Mayank Totale
Currently, the IKE and IPsec use UDP encapsulation whenever faced with NAT gateways which do not allow ESP or IKE packets. But some NAT rules even...