1
<html xmlns="http://www.w3.org/1999/xhtml" xmlns:html="http://www.w3.org/1999/xhtml"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
4
</title><style type="text/css">
6
</style></head><body><div id="content" class="wiki">
7
<div class="wikipage searchable">
9
<h1 id="VirtualPrivateNetworks">Virtual Private Networks</h1>
11
The common standard for Virtual Private Networks is IPSEC. For linux there are four implementations of IPSEC:
13
<ul><li><a class="ext-link" href="http://www.freeswan.org/" shape="rect"><span class="icon">FreeS/WAN</span></a> has no support for smart cards, unless patched with the X.509 patch.
14
That patch comes with documentation how to use smart cards. FreeS/WAN project has ended, you might want to
15
use Openswan or strongSwan instead.
16
</li><li><a class="ext-link" href="http://www.openswan.org/" shape="rect"><span class="icon">Openswan</span></a> supports OpenSC natively and must be compiled with OpenSC support.
17
If that is done, you can find more details in the Openswan documentation:
18
<a class="ext-link" href="http://www.openswan.org/docs/local/README.x509" shape="rect"><span class="icon">README.x509</span></a> has a chapter 8 about Smartcard support.
19
</li><li><a class="ext-link" href="http://www.strongswan.org/" shape="rect"><span class="icon">strongSwan</span></a> supports smart card authentication using PKCS#11 API. It should
20
work fine with <tt>opensc-pkcs11.so</tt>, please report your results. Detailed documentation is part of the
21
<a class="ext-link" href="http://www.strongswan.org/docs/install.htm#chapter_2.3" shape="rect"><span class="icon">strongSwan documentation</span></a>.
22
</li><li><a class="ext-link" href="http://ipsec-tools.sourceforge.net/" shape="rect"><span class="icon">Racoon</span></a> does currently not support smart card authentication.
23
</li><li><a class="ext-link" href="http://www.openvpn.net/" shape="rect"><span class="icon">OpenVPN</span></a> does support PKCS#11 in current devel version. Successfuly
24
tested OpenSC with OpenVPN 2.1beta.7. They have a howto with details on it at <a class="ext-link" href="http://openvpn.net/howto.html" shape="rect"><span class="icon">http://openvpn.net/howto.html</span></a>
29
</div><div class="footer"><hr></hr><p><a href="index.html">Back to Index</a></p></div></body></html>