| 1 |
Source: openswan
|
| 2 |
Section: net
|
| 3 |
Priority: optional
|
| 4 |
Maintainer: Rene Mayrhofer <rmayr@debian.org>
|
| 5 |
Standards-Version: 3.6.1.0
|
| 6 |
Build-Depends: debhelper (>= 4.1.16), libgmp3-dev, libssl-dev, htmldoc, man2html, gawk, libcurl2-dev | libcurl3-dev, libopensc1-dev, libldap2-dev, bison, flex, lynx
|
| 7 |
|
| 8 |
Package: openswan
|
| 9 |
Architecture: any
|
| 10 |
Depends: ${shlibs:Depends}, bsdmainutils, makedev | devfsd, ${debconf-depends}, debianutils (>=1.7), ipsec-tools, openssl, gawk, host, iproute
|
| 11 |
Suggests: openswan-modules-source | kernel-patch-openswan, curl
|
| 12 |
Provides: ike-server
|
| 13 |
Conflicts: ike-server, freeswan
|
| 14 |
Description: IPSEC utilities for Openswan
|
| 15 |
IPSEC is Internet Protocol SECurity. It uses strong cryptography to provide
|
| 16 |
both authentication and encryption services. Authentication ensures that
|
| 17 |
packets are from the right sender and have not been altered in transit.
|
| 18 |
Encryption prevents unauthorised reading of packet contents.
|
| 19 |
.
|
| 20 |
This version of Openswan supports Opportunistic Encryption (OE) out of the
|
| 21 |
box. OE enables you to set up IPsec tunnels to a site without
|
| 22 |
co-ordinating with the site administrator, and without hand
|
| 23 |
configuring each tunnel. If enough sites support OE, a "FAX effect"
|
| 24 |
occurs, and many of us can communicate without eavesdroppers.
|
| 25 |
.
|
| 26 |
In addition to OE, you may manually configure secure tunnels through
|
| 27 |
untrusted networks. Everything passing through the untrusted net is
|
| 28 |
encrypted by the IPSEC gateway machine and decrypted by the gateway
|
| 29 |
at the other end. The result is Virtual Private Network or VPN. This
|
| 30 |
is a network which is effectively private even though it includes
|
| 31 |
machines at several different sites connected by the insecure Internet.
|
| 32 |
.
|
| 33 |
Please note that you will need a recent kernel (>=2.4.24 or 2.6.x)
|
| 34 |
for using this package. The standard Debian kernel includes both IPSEC
|
| 35 |
and crypto support, patching the kernel is no longer necessary!
|
| 36 |
.
|
| 37 |
If you want to use the KLIPS IPSec code for kernel modules instead of the
|
| 38 |
native ones, you will need to install either openswan-modules-source or
|
| 39 |
kernel-patch-openswan and build the respective modules for your kernel.
|
| 40 |
|
| 41 |
Package: openswan-modules-source
|
| 42 |
Architecture: all
|
| 43 |
Depends: coreutils | fileutils, debhelper
|
| 44 |
Recommends: kernel-package (>= 7.04), kernel-source
|
| 45 |
Suggests: openswan
|
| 46 |
Description: IPSEC kernel modules source for Openswan
|
| 47 |
This package contains the source for the Openswan modules to get the necessary
|
| 48 |
kernel support to use Openswan.
|
| 49 |
|
| 50 |
Package: kernel-patch-openswan
|
| 51 |
Architecture: all
|
| 52 |
Depends: coreutils | fileutils
|
| 53 |
Recommends: kernel-package (>= 7.04)
|
| 54 |
Suggests: openswan
|
| 55 |
Description: IPSEC kernel support for Openswan
|
| 56 |
This package contains the patches for the Linux kernel to get the necessary
|
| 57 |
kernel support to use Openswan. If you want to build a kernel module for
|
| 58 |
IPSec, it is much easier to use the openswan-modules-source package instead.
|
| 59 |
This kernel-patch package should probably only be used when building a
|
| 60 |
non-modular kernel or when compiling IPSec non-modular.
|