Return to INSTALL CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan

Annotation of embedaddon/strongswan/INSTALL, revision 1.1.1.1

1.1       misho       1:                 -------------------------
                      2:                 strongSwan - Installation
                      3:                 -------------------------
                      4: 
                      5: 
                      6: Contents
                      7: --------
                      8: 
                      9:     1.   Overview
                     10:     2.   Required packages
                     11:     3.   Optional packages
                     12:     3.1   HTTP fetcher
                     13:     3.2   LDAP
                     14:     3.3   Other pluggable modules
                     15:     4.   Kernel configuration
                     16: 
                     17: 1.  Overview
                     18:     --------
                     19: 
                     20:     Since version 4.x strongSwan uses the GNU build system (Autotools).
                     21:     This simplifies the build process and package maintenance. First, check for
                     22:     the availability of required packages on your system (section 2.). You may
                     23:     want to include support for additional features, which require other
                     24:     packages to be installed (section 3.).
                     25: 
                     26:     To compile an extracted tarball, run the ./configure script first:
                     27: 
                     28:       ./configure
                     29: 
                     30:     You may want to specify some arguments listed in section 3., or see the
                     31:     available options of the script using "./configure --help".
                     32: 
                     33:     After a successful run of the script, run
                     34: 
                     35:       make
                     36: 
                     37:     followed by
                     38: 
                     39:       make install
                     40: 
                     41:     in the usual manner.
                     42: 
                     43:     To check if your kernel fulfills the requirements, see section 4.
                     44: 
                     45:     Next add your connections to "/etc/ipsec.conf" and your secrets to
                     46:     "/etc/ipsec.secrets".
                     47: 
                     48:     At last start strongSwan with
                     49: 
                     50:       ipsec start
                     51: 
                     52: 
                     53: 2.  Required packages
                     54:     -----------------
                     55: 
                     56:     In order to be able to build strongSwan you'll need one of the following
                     57:     cryptographic libraries:
                     58: 
                     59:       * The GNU Multiprecision Arithmetic Library (GMP, libgmp)
                     60:         http://www.gmplib.org
                     61:       * The OpenSSL cryptographic library (libcrypto)
                     62:         http://www.openssl.org
                     63:       * The GNU cryptographic library (libgcrypt)
                     64:         http://www.gnupg.org
                     65: 
                     66:     If no other options are specified during ./configure libgmp will be used.
                     67: 
                     68:     The libraries and the corresponding header files are usually included in
                     69:     the form of one or two packages in the major Linux distributions (for GMP on
                     70:     Debian: libgmp3 and libgmp3-dev).
                     71: 
                     72: 
                     73: 3.  Optional packages
                     74:     -----------------
                     75: 
                     76: 3.1 HTTP Fetcher
                     77:     ------------
                     78: 
                     79:     If you intend to dynamically fetch Certificate Revocation Lists (CRLs)
                     80:     from an HTTP server or as an alternative want to use the Online
                     81:     Certificate Status Protocol (OCSP) then you will need the either of the
                     82:     following libraries:
                     83: 
                     84:       * The cURL library (libcurl)
                     85:         http://curl.haxx.se/libcurl/
                     86:       * The LibSoup library (libsoup)
                     87:         https://live.gnome.org/LibSoup
                     88: 
                     89:     In order to activate the use of either of these libraries in strongSwan you
                     90:     must enable the appropriate ./configure switch.
                     91: 
                     92: 
                     93: 3.2 LDAP
                     94:     ----
                     95: 
                     96:     If you intend to dynamically fetch Certificate Revocation Lists (CRLs)
                     97:     from an LDAP server then you will need the libldap library available
                     98:     from http://www.openldap.org/.
                     99: 
                    100:     OpenLDAP is usually included  with your Linux distribution. You will need
                    101:     both the run-time and development environments (SuSE: openldap2,
                    102:     openldap2-devel).
                    103: 
                    104:     In order to activate the use of the libldap library in strongSwan you must
                    105:     enable the ./configure switch:
                    106: 
                    107:       ./configure [...] --enable-ldap
                    108: 
                    109:     LDAP Protocol version 2 is not supported anymore, --enable-ldap uses always
                    110:     version 3 of the LDAP protocol
                    111: 
                    112: 
                    113: 3.3 Other pluggable modules
                    114:     -----------------------
                    115: 
                    116:     There are many other optional plugins that, for instance, provide support
                    117:     for PKCS#11 or SQL databases.
                    118:     For a more detailed description of these refer to our wiki:
                    119: 
                    120:       * http://wiki.strongswan.org
                    121: 
                    122: 
                    123: 4.  Kernel configuration
                    124:     --------------------
                    125: 
                    126:     Since version 4.x strongSwan only supports 2.6.x and 3.x kernels and its
                    127:     native NETKEY IPsec stack. Please make sure that the following IPsec kernel
                    128:     modules are available:
                    129: 
                    130:       * af_key
                    131:       * ah4
                    132:       * esp4
                    133:       * ipcomp
                    134:       * xfrm_user
                    135:       * xfrm4_tunnel
                    136: 
                    137:     These may be built into the kernel or as modules. Modules get loaded
                    138:     automatically at strongSwan startup.
                    139: 
                    140:     Also the built-in kernel Cryptoapi modules with selected encryption and
                    141:     hash algorithms should be available.
                    142: 
                    143:     Support for multiple routing tables is also recommended.
                    144: 
                    145:     For a more up-to-date list of recommended modules refer to:
                    146: 
                    147:       * http://wiki.strongswan.org/projects/strongswan/wiki/KernelModules
                    148: