速報APP / 通訊 / strongSwan VPN Client

strongSwan VPN Client

價格:免費

更新日期:2019-04-24

檔案大小:6.2M

目前版本:2.1.1

版本需求:Android 4.0.3 以上版本

官方網站:https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient

Email:android@strongswan.org

聯絡地址:隱私權政策

strongSwan VPN Client(圖1)-速報App

Official Android 4+ port of the popular strongSwan VPN solution.

# FEATURES AND LIMITATIONS #

* Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - strongSwan VPN Client won't work on these devices!

* Uses the IKEv2 key exchange protocol (IKEv1 is not supported)

* Uses IPsec for data traffic (L2TP is not supported)

* Full support for changed connectivity and mobility through MOBIKE (or reauthentication)

* Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS with client certificates is also supported

* Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739

* VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the server can also be imported directly into the app.

* IKEv2 fragmentation is supported if the VPN server supports it (strongSwan does so since 5.2.1)

* Split-tunneling allows sending only certain traffic through the VPN and/or excluding specific traffic from it

strongSwan VPN Client(圖2)-速報App

* Per-app VPN allows limiting the VPN connection to specific apps, or exclude them from using it

* The IPsec implementation currently supports the AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2 algorithms

* Passwords are currently stored as cleartext in the database (only if stored with a profile)

* VPN profiles may be imported from files (this is the only reason why the app requests android.permission.READ_EXTERNAL_STORAGE)

Details and a changelog can be found on our wiki: https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient

# EXAMPLE SERVER CONFIGURATION #

Example server configurations may be found on our wiki: https://wiki.strongswan.org/projects/strongswan/wiki/AndroidVPNClient#Server-Configuration

Please note that the host name (or IP address) configured with a VPN profile in the app *must be* contained in the server certificate as subjectAltName extension.

# FEEDBACK #

Please post bug reports and feature requests on our wiki: https://wiki.strongswan.org/projects/strongswan/issues

If you do so, please include information about your device (manufacturer, model, OS version etc.).

strongSwan VPN Client(圖3)-速報App

The log file written by the key exchange service can be sent directly from within the application.