brew

Installer strongswan avec Homebrew, apk, apt, dnf, Nix, pacman, zypper

Consultez les chemins d'installation, exécutables, métadonnées et notes de sécurité de strongswan pour les workflows d'agents IA.

Commande d'installation Notes de sécurité

installation

Commandes d'installation supplémentaires

macOS

Homebrewvérifié · 100%

brew install strongswan

local Homebrew formula metadata

Linux

Alpine Linux apkvérifié · 92%

sudo apk add strongswan

Alpine Linux edge package indexes · strongswan · Source: dl-cdn.alpinelinux.org

Debian aptvérifié · 92%

sudo apt install strongswan

Debian stable package indexes · strongswan · Source: deb.debian.org

Fedora dnfvérifié · 92%

sudo dnf install strongswan

Fedora Rawhide package metadata · strongswan · Source: dl.fedoraproject.org

Nixvérifié · 92%

nix profile install nixpkgs#strongswan

nixpkgs package indexes · pkgs/by-name/st/strongswan/package.nix · Source: api.github.com

Arch Linux pacmanvérifié · 92%

sudo pacman -S strongswan

Arch Linux sync databases · strongswan · Source: geo.mirror.pkgbuild.com

openSUSE zyppervérifié · 92%

sudo zypper install strongswan

openSUSE Tumbleweed package metadata · strongswan · Source: download.opensuse.org

aperçu

Résumé du paquet

VPN based on IPsec

Liens du projet

Commandes et alias

charon-cmd
ipsec
pki
swanctl

historique

Historique du projet et usages

strongSwan is a long-running open source IPsec and IKE implementation used to build policy- and route-based VPNs. In package-manager culture it is a substantial security package: a suite of daemons, plugins, and command-line tools such as `ipsec`, `swanctl`, `pki`, and `charon-cmd` rather than a single small executable.

Historique du projet

The official strongSwan history says the project launched in 2005 as a fork of the discontinued FreeS/WAN project, integrating the X.509 patch its authors had contributed since 2000. The project later replaced inherited FreeS/WAN code with a new modular IKE daemon written in a modern object-oriented C style.

strongSwan initially used the new daemon for IKEv2 while IKEv1 remained handled by an extended FreeS/WAN pluto daemon. Because IKEv2 adoption by other vendors was slower than expected, strongSwan added IKEv1 support to the new daemon in strongSwan 5.0 in 2012 and removed pluto and other legacy components.

Historique d'adoption

The project documents more than 400,000 lines of code, more than 400 automated tests, and more than 110 contributors on its official about page. The input package facts show broad packaging across Homebrew, Debian and Ubuntu components, Fedora, Nix, pacman, APK, and zypper, reflecting its role as infrastructure software rather than a niche CLI.

Modes d'utilisation

Administrators use strongSwan to configure, control, and monitor IPsec/IKE VPNs. Official documentation describes `swanctl` as the command-line utility for configuring, controlling, and monitoring the IKE charon daemon through the vici interface, while the broader documentation covers configuration files, certificates, kernel integration, and platform-specific builds.

Pourquoi les passionnés de paquets s'y intéressent

Package nerds care about strongSwan because it sits at the intersection of kernel networking, cryptography, service management, plugin selection, and distro policy. Packaging it correctly means handling default configuration paths, private-key directories, optional plugins, service startup, and compatibility across Linux, macOS, FreeBSD, Android, and other supported environments.

Chronologie

2000: strongSwan authors were contributing an X.509 patch to FreeS/WAN.
2005: strongSwan launched as a fork of the discontinued FreeS/WAN project.
2012: strongSwan 5.0 added IKEv1 support to the new daemon and removed pluto and other legacy components.
2022: secunet Security Networks AG acquired intellectual property rights to the strongSwan project.

Related projects

FreeS/WAN is the direct ancestor named by the official project history. The official documentation also positions `swanctl`, `charon`, `pki`, and the vici interface as core parts of the modern strongSwan toolchain.

Sources

https://docs.strongswan.org/docs/latest/devs/devs.html
https://docs.strongswan.org/docs/latest/swanctl/swanctl.html
https://strongswan.org/about.html
source_facts.package-manager

posture de sécurité

Niveau de risque : vert

narrow executable package without higher-risk signals.

Classificateur de risque

risque vert · confiance faible · appliance

Pourquoi

narrow executable package without higher-risk signals

Signaux

metadata:no-higher-risk-signals

Comportement d'installation

Aucun hook post-install Homebrew n’est enregistré dans les métadonnées de formule.
Les métadonnées de bottle Homebrew sont disponibles pour 6 plateformes.
S’installe avec 1 dépendances d’exécution.

Revue recommandée

Avant une utilisation sans surveillance par un agent, vérifiez si l'outil lit des identifiants en clair, écrit un état distant, publie des artefacts ou lance des plugins.

local files

Configuration and credential file locations

These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.

Configuration files

Config paths the tool may read or write during local use.

Unix: /etc/strongswan.conf/etc/strongswan.d//etc/swanctl/swanctl.conf/etc/swanctl/conf.d/*.conf

Credential files

Credential-bearing paths to review before unattended agent runs.

Unix: /etc/swanctl/private//etc/swanctl/rsa//etc/swanctl/ecdsa//etc/swanctl/pkcs8//etc/swanctl/pkcs12//etc/swanctl/swanctl.conf

exécutables

Exécutables installés

Commande	Type	Exposition
`charon-cmd`	cli	exécutable global
`ipsec`	cli	exécutable global
`pki`	cli	exécutable global
`swanctl`	cli	exécutable global

fraîcheur

Version et fraîcheur

Ces signaux séparent l'âge de génération de la page, l'activité du gestionnaire de paquets et la comparaison avec les versions amont. Un retard de version n'est signalé que lorsqu'une URL de preuve et des versions comparables sont présentes.

page générée2026-07-25

version du gestionnaire6.0.7

gestionnaire mis à jour2026-06-08

données localesOK

amontnot checked

dernière version détectéenon détecté

https://www.strongswan.org

infoRelease/tag comparison is only available for GitHub repositories.https://www.strongswan.orgconfiance none

métadonnées d'installation

Métadonnées du paquet

Clé du paquet	brew:strongswan
Version	6.0.7
Gestionnaire de paquets	Homebrew
Page du gestionnaire de paquets	https://formulae.brew.sh/formula/strongswan
Page d'accueil	https://www.strongswan.org
Dépôt	https://github.com/strongswan/strongswan
Docs amont	https://docs.strongswan.org/
Licence	GPL-2.0-or-later
Archive source	https://download.strongswan.org/strongswan-6.0.7.tar.bz2
Dernière mise à jour	2026-06-08T08:40:44Z
Pulse	updated
Dépendances	openssl@3
Bibliothèques fournies par macOS	curl
Bouteille	disponible (sur arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux)
post-install Homebrew	non défini
Service	aucun déclaré
Précautions	You will have to run both "ipsec" and "charon-cmd" with "sudo".

faits du registre

Détails de la base source

Source Database	Homebrew formula API
Tap	homebrew/core
Full Name	strongswan
Version Scheme	0
Revision	0
Head Version	HEAD
Bottle Stable Root URL	https://ghcr.io/v2/homebrew/core
Deprecated	no
Disabled	no
Keg Only	no
URL Keys	head stable

correspondances dans les bases sources

Autres enregistrements de gestionnaires de paquets

Les correspondances proviennent d’index externes de gestionnaires de paquets et restent séparées des liens de paquets Automic Vault locaux.

Debian apt95%

charon-cmd 6.0.1-6+deb13u5

standalone IPsec client