strongSwan - Design by Margo Galas <galas (at) solnet (dot) ch>

Main Sponsors

secunet

codelabs

strongSwan Vulnerability (CVE-2021-41991)

A denial-of-service vulnerability in the in-memory certificate cache was discovered in strongSwan. All versions since 4.2.10 are affected.

strongSwan Vulnerability (CVE-2021-41990)

A denial-of-service vulnerability in the gmp plugin was discovered in strongSwan. All versions since 5.6.1 are affected.

strongSwan 5.9.4 Released

We are happy to announce the release of strongSwan 5.9.4, which fixes two denial-of-service vulnerabilities and comes with several other new features and fixes.

strongSwan 5.9.3 Released

We are happy to announce the release of strongSwan 5.9.3, which supports IKE encryption via TKM, adds more algorithms to the wolfssl plugin and brings several other new features and fixes.

strongSwan 5.9.2 Released

We are happy to announce the release of strongSwan 5.9.2, which supports remote attestation of the complete boot phase, adds experimental support for TLS 1.3 and brings several other new features and fixes.

strongSwan 5.9.1 Released

We are happy to announce the release of strongSwan 5.9.1, which supports TPM 2.0 BIOS/EFI measurements and brings several other new features and fixes.

strongSwan 5.9.0 Released

We are happy to announce the release of strongSwan 5.9.0, which prefers AES-GCM for ESP, comes with several updates for the NetworkManager plugin/backend and the VICI plugin, and brings several other new features and fixes.

strongSwan 5.8.4 Released

strongSwan 5.8.4 fixes two regressions in last week's 5.8.3 release, one affecting IKEv1 Quick Mode the other OpenSSL's SHAKE128/256 XOFs.

strongSwan 5.8.3 Released

We are happy to announce the release of strongSwan 5.8.3, which comes with several updates for the NetworkManager plugin/backend, reallocates reqids, uses throw type routes for passthrough policies on Linux, and brings several other new features and fixes.

strongSwan 5.8.2 Released

We are happy to announce the release of strongSwan 5.8.2, which adds support for identity-based CA constraints, can send intermediate CA certificates in hash-and-URL encoding and brings several other new features and fixes.