Package: charon-cmd
Description-md5: 80fd42eb6fb38dab592c2f0b87243623
Description-en: standalone IPsec client
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package contains the charon-cmd command, which can be used as a client to
 connect to a remote IKE daemon.

Package: libcharon-extra-plugins
Description-md5: b38ca344004a072b358d09bd7d91635c
Description-en: strongSwan charon library (extra plugins)
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides extra plugins for the charon library:
 - addrblock (Narrow traffic selectors to RFC 3779 address blocks in X.509
 certificates)
 - certexpire (Export expiration dates of used certificates)
 - eap-aka (Generic EAP-AKA protocol handler using different backends)
 - eap-gtc (EAP-GTC protocol handler authenticating with XAuth backends)
 - eap-identity (EAP-Identity identity exchange algorithm, to use with other
 EAP protocols)
 - eap-md5 (EAP-MD5 protocol handler using passwords)
 - eap-radius (EAP server proxy plugin forwarding EAP conversations to a
 RADIUS server)
 - eap-tls (EAP-TLS protocol handler, to authenticate with certificates in
 EAP)
 - eap-tnc (EAP-TNC protocol handler, Trusted Network Connect in a TLS tunnel)
 - eap-ttls (EAP-TTLS protocol handler, wraps other EAP methods securely)
 - error-notify (Notification about errors via UNIX socket)
 - ha (High-Availability clustering)
 - kernel-libipsec (Userspace IPsec Backend with TUN devices)
 - led (Let Linux LED subsystem LEDs blink on IKE activity)
 - lookip (Virtual IP lookup facility using a UNIX socket)
 - tnc (Trusted Network Connect)
 - unity (Cisco Unity extensions for IKEv1)
 - xauth-eap (XAuth backend that uses EAP methods to verify passwords)
 - xauth-pam (XAuth backend that uses PAM modules to verify passwords)
 - eap-dynamic (EAP proxy plugin that dynamically selects an EAP method
 requested/supported by the client (since 5.0.1))
 - eap-peap (EAP-PEAP protocol handler, wraps other EAP methods securely)

Package: libstrongswan-extra-plugins
Description-md5: 1e1a1805a79ee75000b9db20a1394f6a
Description-en: strongSwan utility and crypto library (extra plugins)
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package provides extra plugins for the strongSwan utility and
 cryptographic library.
 .
 Included plugins are:
 - aes (AES-128/192/256 cipher software implementation)
 - af-alg [linux] (AF_ALG Linux crypto API interface, provides
 ciphers/hashers/hmac/xcbc)
 - ccm (CCM cipher mode wrapper)
 - cmac (CMAC cipher mode wrapper)
 - ctr (CTR cipher mode wrapper)
 - curl (libcurl based HTTP/FTP fetcher)
 - curve25519 (support for Diffie-Hellman group 31 using Curve25519 and
 support for the Ed25519 digital signature algorithm for IKEv2)
 - fips-prf (PRF specified by FIPS, used by EAP-SIM/AKA algorithms)
 - gcrypt (Crypto backend based on libgcrypt, provides
 RSA/DH/ciphers/hashers/rng)
 - gmp (RSA/DH crypto backend based on libgmp)
 - hmac (HMAC wrapper using various hashers)
 - ldap (LDAP fetching plugin based on libldap)
 - md5 (MD5 hasher software implementation)
 - mgf1 (Mask Generation Functions based on the SHA-1, SHA-256 and SHA-512)
 - padlock (VIA padlock crypto backend, provides AES128/SHA1)
 - pgp (PGP encoding/decoding routines)
 - pkcs11 (PKCS#11 smartcard backend)
 - pkcs12 (PKCS#12 decoding routines)
 - rc2 (RC2 cipher software implementation)
 - rdrand (High quality / high performance random source using the Intel
 rdrand instruction found on Ivy Bridge processors)
 - sha1 (SHA1 hasher software implementation)
 - sha2 (SHA256/SHA384/SHA512 hasher software implementation)
 - test-vectors (Set of test vectors for various algorithms)
 - xcbc (XCBC wrapper using various ciphers)
 .
 Also included is the libtpmtss library adding support for TPM plugin
 (https://wiki.strongswan.org/projects/strongswan/wiki/TpmPlugin)

Package: packagekit-command-not-found
Description-md5: f46269a57fdaac0b45bc1962744cdaf3
Description-en: Offer to install missing programs automatically
 PackageKit allows performing simple software management tasks over a DBus
 interface e.g refreshing the cache, updating, installing and removing
 software packages or searching for multimedia codecs and file handlers.
 .
 This package contains a simple handler for command_not_found that offers to
 install missing packages on the command line using PackageKit.

Package: packagekit-gtk3-module
Description-md5: b4094b413124ff3eeddd6dcdb91ab037
Description-en: Install fonts automatically using PackageKit
 PackageKit allows performing simple software management tasks over a DBus
 interface e.g. refreshing the cache, updating, installing and removing
 software packages or searching for multimedia codecs and file handlers.
 .
 The PackageKit GTK+ module allows any Pango application to install
 fonts from configured repositories using PackageKit.

Package: strongswan-charon
Description-md5: 3f55915d17f7e36d9b31e2c4da5c11d2
Description-en: strongSwan Internet Key Exchange daemon
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 charon is an IPsec IKEv2 daemon which can act as an initiator or a responder.
 It is written from scratch using a fully multi-threaded design and a modular
 architecture. Various plugins can provide additional functionality.

Package: strongswan-nm
Description-md5: fe4e82468fec86f66c41601086865ec7
Description-en: strongSwan plugin to interact with NetworkManager
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This plugin provides an interface which allows NetworkManager to configure
 and control the IKEv2 daemon directly through D-Bus. It is designed to work
 in conjunction with the network-manager-strongswan package, providing
 a simple graphical frontend to configure IPsec based VPNs.

Package: strongswan-pki
Description-md5: e39ead8c35dce81cd768bc453bc29db7
Description-en: strongSwan IPsec client, pki command
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 This package contains the pki tool which allows on to run a simple public key
 infrastructure.

Package: strongswan-starter
Description-md5: b25b8defb52457fc021a93ec427b9da8
Description-en: strongSwan daemon starter and configuration file parser
 The strongSwan VPN suite uses the native IPsec stack in the standard
 Linux kernel. It supports both the IKEv1 and IKEv2 protocols.
 .
 The starter and the associated "ipsec" script control the charon daemon from
 the command line. It parses ipsec.conf and loads the configurations to the
 daemon.

