Home » Using StrongSwan with smart cards

Installing strongSwan with smartcard support

Installing from binaries

In Debian based systems, strongswan is compiled with smartcard support. To install strongSwan, type as root:

$ apt-get install strongswan ipsec

Display ipsec version typing this command:

$ ipsec version
Linux strongSwan U4.3.2/K2.6.32-trunk-amd64
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil, Switzerland
See 'ipsec --copyright' for copyright information.

Our station is running strongSwan 4.3.2 on GNU/Linux kernel 2.6.32.

Installing from sources

If your distribution does not offer strongSwan with smartcards, you may need to compile strongSwan from sources:

$ ./configure < add your options there > --enable-pluto --enable-smartcard
$ make
$ sudo make install

A more complex configuration line would be:

$ ./configure --enable-pluto --sysconfdir=/etc --prefix=/usr --libexecdir=/usr/lib \
--enable-openssl \
--enable-nm \
--enable-agent \
--enable-gcrypt \
--enable-integrity-test \
--enable-openssl \
--enable-eap-gtc --enable-eap-md5 --enable-eap-mschapv2 --enable-eap-aka --enable-eap-aka-3gpp2 --enable-eap-identity \
--enable-smartcard
$ make
$ sudo make install
Bookmark/Search this post with