Source: strongswan
Section: net
Priority: optional
Maintainer: Ubuntu Developers <ubuntu-devel-discuss@lists.ubuntu.com>
XSBC-Original-Maintainer: strongSwan Maintainers <pkg-swan-devel@lists.alioth.debian.org>
Uploaders: Rene Mayrhofer <rmayr@debian.org>,
  Yves-Alexis Perez <corsac@debian.org>
Standards-Version: 3.9.5
Vcs-Browser: http://anonscm.debian.org/gitweb/?p=pkg-swan/strongswan.git;a=summary
Vcs-Git: git://anonscm.debian.org/pkg-swan/strongswan.git
Build-Depends: debhelper (>= 9), dpkg-dev (>= 1.16.1), dh-apparmor,
  libtool, libgmp3-dev, libssl-dev (>= 0.9.8), libldns-dev, libunbound-dev,
  libcurl4-openssl-dev | libcurl3-dev | libcurl2-dev, libsoup2.4-dev,
  libpcsclite-dev, libldap2-dev, libpam0g-dev, libkrb5-dev, bison, flex, bzip2,
  po-debconf, hardening-wrapper, libtspi-dev, libxml2-dev, libsqlite3-dev,
  libmysqlclient-dev, network-manager-dev (>= 0.7) [linux-any],
  libnm-glib-vpn-dev (>= 0.7) [linux-any], libnm-util-dev (>= 0.7) [linux-any], 
  gperf, libcap-dev [linux-any], dh-autoreconf
Homepage: http://www.strongswan.org

Package: strongswan
Architecture: all
Depends: ${misc:Depends}, strongswan-ike
Suggests: network-manager-strongswan
Description: IPsec VPN solution metapackage
 The strongSwan VPN suite is based on the IPsec stack in standard Linux
 kernels. It supports both the IKEv1 and IKEv2 protocols.
 .
 This metapackage installs the packages required to maintain IKEv1 and IKEv2
 connections via ipsec.conf or ipsec.secrets.

Package: libstrongswan
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, openssl
Conflicts: strongswan (<< 4.2.12-1)
Breaks: strongswan-ikev2 (<< 4.6.4)
Replaces: strongswan-ikev2 (<< 4.6.4)
Suggests: strongswan-tnc-imcvs
Description: strongSwan utility and crypto library
 StrongSwan is an IPsec-based VPN solution for the Linux kernel. It uses the
 native IPsec stack and runs on any recent 2.6 kernel (no patching required).
 It supports both IKEv1 and the newer IKEv2 protocols.
 .
 This package provides the underlying library of charon and other strongSwan
 components. It is built in a modular way and is extendable through various
 plugins.

Package: strongswan-dbg
Architecture: any
Section: debug
Priority: extra
Depends: ${misc:Depends}, strongswan, libstrongswan
Description: strongSwan library and binaries - debugging symbols
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the symbols needed for debugging of strongswan.

Package: strongswan-starter
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, 
  libstrongswan (= ${binary:Version}), strongswan-ike,
  adduser
Conflicts: strongswan (<< 4.2.12-1)
Description: strongSwan daemon starter and configuration file parser
 strongSwan is an IPsec-based VPN solution for Linux and other Unixes. It uses
 the native IPsec stack and runs on any recent kernel (no patching required).
 It supports both IKEv1 and the newer IKEv2 protocols.
 .
 The starter and the associated "ipsec" script control the charon daemon
 from the command line. It parses ipsec.conf and loads the configurations to
 the daemon.

Package: strongswan-ike
Architecture: any
Pre-Depends: debconf | debconf-2.0
Depends: ${shlibs:Depends}, ${misc:Depends}, 
  libstrongswan (= ${binary:Version}), strongswan-starter | strongswan-nm,
  strongswan-plugin-openssl | strongswan-plugin-gcrypt | strongswan-plugin-gmp,
  bsdmainutils, debianutils (>=1.7), host, iproute2 | iproute [linux-any]
Suggests: strongswan-plugin-agent, strongswan-plugin-certexpire,
  strongswan-plugin-coupling, strongswan-plugin-curl, strongswan-plugin-dnscert,
  strongswan-plugin-dnskey, strongswan-plugin-duplicheck,
  strongswan-plugin-error-notify, strongswan-plugin-ipseckey,
  strongswan-plugin-ldap, strongswan-plugin-led, strongswan-plugin-lookip,
  strongswan-plugin-ntru, strongswan-plugin-pkcs11, strongswan-plugin-radattr,
  strongswan-plugin-sql, strongswan-plugin-soup, strongswan-plugin-unity,
  strongswan-plugin-whitelist, strongswan-tnc-client, strongswan-tnc-server
Provides: ike-server
Conflicts: freeswan (<< 2.04-12), openswan, strongswan (<< 4.2.12-1)
Replaces: strongswan-ikev1, strongswan-ikev2
Description: strongSwan Internet Key Exchange (v2) daemon
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 Charon is an IPsec IKEv2 daemon. It is
 written from scratch using a fully multi-threaded design and a modular
 architecture. Various plugins provide additional functionality.

Package: strongswan-nm
Architecture: linux-any
Depends: ${shlibs:Depends}, ${misc:Depends}, strongswan-ike
Recommends: network-manager-strongswan
Description: strongSwan charon for interaction with NetworkManager
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This plugin provides special charon deamon which interfaces with NetworkManager
 to configure and control the IKEv2 daemon directly through D-Bus. It is
 designed to work in conjunction with the network-manager-strongswan package,
 providing a simple graphical frontend to configure IPsec based VPNs.

Package: strongswan-plugin-af-alg
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for AF_ALG Linux crypto API interface
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the AF_ALG Linux crypto API interface plugin for
 strongSwan. It provides ciphers/hashers/hmac/xcbc.

Package: strongswan-plugin-agent
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}), openssh-client
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for accessing private keys via ssh-agent
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for accessing to private keys via
 ssh-agent.

Package: strongswan-plugin-attr-sql
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-sqlite | strongswan-plugin-mysql
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for providing IKE attributes from databases
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for providing IKE attributes read
 from a database to peers.

Package: strongswan-plugin-certexpire
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for exporting expiration dates of certificates
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the plugin for exporting expiration dates of used
 certificates for strongSwan.

Package: strongswan-plugin-coupling
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for permanent peer certificate coupling
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the permanent peer certificate coupling plugin for
 strongSwan.

Package: strongswan-plugin-curl
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for the libcurl based HTTP/FTP fetcher
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the libcurl based HTTP/FTP fetcher plugin for strongSwan.

Package: strongswan-plugin-dhcp
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for forwarding DHCP request to a server
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for allowing the forwarding of DHCP
 requests for virtual IP addresses to a DHCP server.

Package: strongswan-plugin-dnscert
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-unbound (= ${binary:Version})
Description: strongSwan plugin for authentication via CERT RRs
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for authentication via CERT RRs
 protected by DNSSEC.

Package: strongswan-plugin-dnskey
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for parsing RFC 4034 public keys
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the plugin for parsing RFC 4034 public keys for
 strongSwan.

Package: strongswan-plugin-duplicheck
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for duplicheck functionality
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the duplicheck functionality.
 .
 The duplicheck plugin provides an advanced but very specialized peer identity
 duplicate checking. It works independent from the ipsec.conf uniqueids feature.
 .
 More information may be found at:
 http://wiki.strongswan.org/projects/strongswan/wiki/Duplicheck

Package: strongswan-plugin-eap-aka
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for generic EAP-AKA protocol handling
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for generic EAP-AKA protocol
 handling using different backends.

Package: strongswan-plugin-eap-aka-3gpp2
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-eap-aka (= ${binary:Version})
Description: strongSwan plugin for the 3GPP2-based EAP-AKA backend
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-AKA backend
 implementing the standard 3GPP2 algorithm in software.

Package: strongswan-plugin-eap-dynamic
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for dynamic EAP method selection
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP proxying that dynamically
 selects an EAP method requested/supported by the client.

Package: strongswan-plugin-eap-gtc
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-xauth-eap | strongswan-plugin-xauth-generic | strongswan-plugin-xauth-pam
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for EAP-GTC protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-GTC protocol handling while
 authenticating with XAuth backends.

Package: strongswan-plugin-eap-md5
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for EAP-MD5 protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-MD5 protocol handling using
 passwords.

Package: strongswan-plugin-eap-mschapv2
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for EAP-MSCHAPv2 protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-MSCHAPv2 protocol handling
 using passwords/NT hashes.

Package: strongswan-plugin-eap-peap
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for EAP-PEAP protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-PEAP protocol handling,
 which wraps other EAP methods securely.

Package: strongswan-plugin-eap-radius
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for EAP interface to a RADIUS server
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for forwarding EAP conversations
 from an EAP server to a RADIUS server.

Package: strongswan-plugin-eap-sim
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for generic EAP-SIM protocol handling
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for generic EAP-SIM protocol
 handling using different backends.

Package: strongswan-plugin-eap-sim-file
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-eap-sim (= ${binary:Version})
Description: strongSwan plugin for EAP-SIM credentials from files
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-SIM backend for reading
 triplets from a file.

Package: strongswan-plugin-eap-sim-pcsc
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-eap-sim (= ${binary:Version})
Description: strongSwan plugin for EAP-SIM credentials on smartcards
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-SIM backend based on a
 PC/SC smartcard reader.

Package: strongswan-plugin-eap-simaka-pseudonym
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-fips-prf (= ${binary:Version})
Description: strongSwan plugin for the EAP-SIM/AKA identity database
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-SIM/AKA in-memory
 pseudonym identity database.

Package: strongswan-plugin-eap-simaka-reauth
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-fips-prf (= ${binary:Version})
Description: strongSwan plugin for the EAP-SIM/AKA reauthentication database
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-SIM/AKA in-memory
 reauthentication identity database.

Package: strongswan-plugin-eap-simaka-sql
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-sql (= ${binary:Version}),
  strongswan-plugin-fips-prf (= ${binary:Version})
Description: strongSwan plugin for SQL-based EAP-SIM/AKA backend reading
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the EAP-SIM/AKA backend reading
 triplets/quintuplets from a SQL database.

Package: strongswan-plugin-eap-tls
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for the EAP-TLS protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-TLS protocol handling, to
 authenticate with certificates in EAP.

Package: strongswan-plugin-eap-tnc
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for the EAP-TNC protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-TNC protocol handling,
 Trusted Network Connect in a TLS tunnel.

Package: strongswan-plugin-eap-ttls
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: strongswan-ike (<< 5.1.1-0ubuntu1)
Breaks: strongswan-ike (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for the EAP-TTLS protocol handler
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for EAP-TTLS protocol handling,
 which wraps other EAP methods securely.

Package: strongswan-plugin-error-notify
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for error notifications
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the plugin for error notifications, via UNIX socket, for
 strongSwan.

Package: strongswan-plugin-farp
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for faking ARP responses
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for faking ARP responses for
 requests to a virtual IP address assigned to a peer.

Package: strongswan-plugin-fips-prf
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for PRF specified by FIPS
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the special
 pseudo-random-function (PRF) specified by FIPS, used by EAP-SIM/AKA algorithms.

Package: strongswan-plugin-gcrypt
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for gcrypt
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the crypto backend based on libgcrypt, which provides a
 RSA/DH/ciphers/hashers/rng plugin for strongSwan.

Package: strongswan-plugin-gmp
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for libgmp based crypto
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the crypto backend based on libgmp, which provides a
 RSA/DH plugin for strongSwan.

Package: strongswan-plugin-ipseckey
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-unbound (= ${binary:Version})
Description: strongSwan plugin for authentication via IPSECKEY RRs
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for authentication via IPSECKEY RRs
 protected by DNSSEC.

Package: strongswan-plugin-kernel-libipsec
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
Description: strongSwan plugin for a IPsec backend that entirely in userland
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin which provides an IPsec backend
 that works entirely in userland, using TUN devices and strongSwan's own IPsec
 implementation libipsec. This is useful for when there is no kernel support for
 IPsec.

Package: strongswan-plugin-ldap
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for LDAP CRL fetching
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for fetching CRL from ldap:// URLs.

Package: strongswan-plugin-led
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for LEDs blinking on IKE activity
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for letting the Linux LED subsystem
 blink LEDs on IKE activity.

Package: strongswan-plugin-load-tester
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for load testing
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the load testing plugin for strongSwan.
 .
 WARNING: Never enable the load-testing plugin on production systems. It
 provides preconfigured credentials and allows an attacker to authenticate as
 any user.

Package: strongswan-plugin-lookip
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for lookip interface
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin which provides an interface to
 query information about tunnels via the peer's virtual IP address.

Package: strongswan-plugin-mysql
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for MySQL
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the MySQL database backend plugin for strongSwan.

Package: strongswan-plugin-ntru
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for NTRU crypto
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the key exchange based on post-quantum computer NTRU
 encryption plugin for strongSwan.

Package: strongswan-plugin-openssl
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for OpenSSL
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the crypto backend based on OpenSSL for strongSwan,
 providing RSA/ECDSA/DH/ECDH/ciphers/hashers/HMAC/X.509/CRL/RNG.

Package: strongswan-plugin-pgp
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for PGP encoding/decoding routines
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for PGP encoding/decoding routines.

Package: strongswan-plugin-pkcs11
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for PKCS#11 smartcard backend
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the PKCS#11 smartcard backend for strongSwan.

Package: strongswan-plugin-pubkey
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for raw public keys
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for handling raw public keys as
 trusted certificates.

Package: strongswan-plugin-radattr
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for custom RADIUS attribute processing
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin to inject and process custom RADIUS
 attributes as IKEv2 client.

Package: strongswan-plugin-sql
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-plugin-sqlite | strongswan-plugin-mysql
Description: strongSwan plugin for SQL configuration and credentials
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the SQL configuration and credentials engine plugin for
 strongSwan. Using either SQLite or MySQL.

Package: strongswan-plugin-sqlite
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for SQLite
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the SQLite database backend plugin for strongSwan.

Package: strongswan-plugin-soup
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for the libsoup based HTTP fetcher
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the libsoup based HTTP fetcher plugin for strongSwan.

Package: strongswan-plugin-sshkey
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for SSH key decoding routines
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for SSH key decoding routines.

Package: strongswan-plugin-systime-fix
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for system time fixing
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 The systime-fix plugin for strongSwan is designed for embedded systems that
 don't have a valid system time just after boot. It detects if the system time
 is incorrect and disables certificate lifetime validation during this period.
 This allows the device to establish tunnels, even if the system time is out of
 sync, and for example connect to an NTP server.
 .
 Once the system time gets corrected, the plugin can detect it and verify the
 lifetimes of all certificates used for active tunnels. If any certificate in
 the trust-chain is not valid for the given system time, the tunnel gets either
 closed or reestablished.

Package: strongswan-plugin-unbound
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for DNSSEC-enabled resolver using libunbound
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the DNSSEC enabled resolver, using libunbound for
 strongSwan.

Package: strongswan-plugin-unity
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for IKEv1 Cisco Unity Extensions
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the Unity plugin for strongSwan. It provides support for
 parts of the IKEv1 Cisco Unity Extensions.

Package: strongswan-plugin-whitelist
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for peer-verification against a whitelist
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the plugin for checking authenticated identities against
 a whitelist for strongSwan.

Package: strongswan-plugin-xauth-eap
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for XAuth backend using EAP methods
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the XAuth backend that uses
 EAP methods to verify passwords.

Package: strongswan-plugin-xauth-generic
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Replaces: libstrongswan (<< 5.1.1-0ubuntu1)
Breaks: libstrongswan (<< 5.1.1-0ubuntu1)
Description: strongSwan plugin for the generic XAuth backend
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the generic XAuth backend that
 provides passwords from ipsec.secrets and other credential sets.

Package: strongswan-plugin-xauth-noauth
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for the generic XAuth backend
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the XAuth backend that does no
 authentication.

Package: strongswan-plugin-xauth-pam
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for XAuth backend using PAM
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the strongSwan plugin for the XAuth backend that uses
 PAM modules to verify passwords.

Package: strongswan-pt-tls-client
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-tnc-client (= ${binary:Version})
Description: strongSwan TLS-based Posture Transport (PT) protocol client
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the TLS-based Posture Transport (PT) protocol client for
 strongSwan. The PT-TLS protocol carries the Network Endpoint Assessment (NEA)
 message exchange under the protection of a Transport Layer Security (TLS)
 secured tunnel.

Package: strongswan-tnc-ifmap
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Description: strongSwan plugin for Trusted Network Connect's (TNC) IF-MAP client
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides Trusted Network Connect's (TNC) IF-MAP 2.0 client.

Package: strongswan-tnc-base
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan (= ${binary:Version})
Suggests: strongswan-tnc-ifmap, strongswan-tnc-pdp
Description: strongSwan Trusted Network Connect's (TNC) - base files
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the base files for strongSwan's Trusted Network
 Connect's (TNC) functionality.
 .
 strongSwan's IMC/IMV dynamic libraries can be used by any third party TNC
 client/server implementation possessing a standard IF-IMC/IMV interface.

Package: strongswan-tnc-client
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}), strongswan-tnc-base (= ${binary:Version})
Suggests: strongswan-pt-tls-client
Description: strongSwan Trusted Network Connect's (TNC) - client files
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the client functionality for strongSwan's Trusted Network
 Connect's (TNC) features.
 .
 It includes the OS, scanner, test, SWID, and attestation IMCs.

Package: strongswan-tnc-server
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-tnc-base (= ${binary:Version}),
  strongswan-plugin-sqlite (= ${binary:Version})
Description: strongSwan Trusted Network Connect's (TNC) - server files
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides the server functionality for strongSwan's Trusted Network
 Connect's (TNC) features.

Package: strongswan-tnc-pdp
Architecture: any
Depends: ${shlibs:Depends}, ${misc:Depends},
  libstrongswan (= ${binary:Version}),
  strongswan-tnc-server (= ${binary:Version})
Description: strongSwan plugin for Trusted Network Connect's (TNC) PDP
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides Trusted Network Connect's (TNC) Policy Decision Point
 (PDP) with RADIUS server interface.

Package: strongswan-ikev1
Architecture: all
Depends: ${misc:Depends}, strongswan-ike
Section: oldlibs
Priority: extra
Description: strongswan IKEv1 daemon, transitional package
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package used to install the pluto daemon, implementing the IKEv1
 protocol. It has been replaced by charon in the strongswan-ike package.

Package: strongswan-ikev2
Architecture: all
Depends: ${misc:Depends}, strongswan-ike
Section: oldlibs
Priority: extra
Description: strongswan IKEv2 daemon, transitional package
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package used to install the charon daemon, implementing the IKEv2
 protocol. It has been replaced the strongswan-ike package.
