Annotated edit history of
FreeSwan version 6, including all changes.
View license author blame.
| Rev |
Author |
# |
Line |
| 3 |
CraigBox |
1 |
[FreeS/WAN|http://www.freeswan.org/], for [Free] Secure Wide Area Network, was the first project bringing IPSec to [Linux]. |
| 1 |
CraigBox |
2 |
|
| 3 |
CraigBox |
3 |
The program was initially written to reach the goal of OpportunisticEncryption by first "securing 5% of the Internet traffic against passive wiretapping in 1996 ~[..] we can secure 20% the next year, against both active and passive attacks; and 80% the following year. Soon the whole Internet will be private and secure." |
| 2 |
CraigBox |
4 |
|
| 3 |
CraigBox |
5 |
As the method they used was a general purpose [IPSec] daemon, it became far more popular for [VPN] tunnels across public networks such as the Internet. |
| 2 |
CraigBox |
6 |
|
| 6 |
AndreasSteffen |
7 |
Unfortunately, come 2004, the 5% goal wasn't even reached, and so the project stopped. Two forks called OpenSwan and StrongSwan took up the code from where it left off. |
| 3 |
CraigBox |
8 |
|
| 5 |
CraigBox |
9 |
FreeS/WAN's own kernel IPsec implementation is called [KLIPS], which was ported to the 2.6 kernel as part of the final 2.06 release. FreeS/WAN and derivatives can also use the new [26sec] implementation. |
| 3 |
CraigBox |
10 |
|
| |
|
11 |
!! ~FreeS/WAN Notes |
| |
|
12 |
|
| |
|
13 |
<pre> |
| 2 |
CraigBox |
14 |
Starting FreeS/WAN IPsec U2.01/K1.96... |
| |
|
15 |
/usr/lib/ipsec/eroute: pfkey write failed, returning -1 with errno=22. |
| |
|
16 |
Invalid argument, check kernel log messages for specifics. |
| 3 |
CraigBox |
17 |
</pre> |
| |
|
18 |
|
| |
|
19 |
pfkey has changed between 1.96 and 2.x - upgrade your kernel IPSEC support to 2.x or higher. |
| 2 |
CraigBox |
20 |
|
| 3 |
CraigBox |
21 |
* See http://vpn.ebootis.de/ for Windows interconnection information. |
