1 files changed, 82 insertions, 23 deletions
diff --git a/debian/control b/debian/control
index e79379786..0e9d005aa 100644
--- a/debian/control
+++ b/debian/control
@@ -7,35 +7,94 @@ Build-Depends: debhelper (>= 7.0.0), libtool, libgmp3-dev, libssl-dev (>= 0.9.8)
 Homepage: http://www.strongswan.org
 
 Package: strongswan
+Architecture: all
+Depends: strongswan-ikev1, strongswan-ikev2
+Suggests: network-manager-strongswan
+Description: IPsec VPN solution metapackage
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ strongSwan is one of the two remaining forks of the original FreeS/WAN 
+ project and focuses on IKEv2 support, X.509 authentication and complete PKI 
+ support. For a focus on Opportunistic Encryption (OE) and interoperability 
+ with non-standard IPsec features, see Openswan.
+ .
+ This metapackage has dependencies to the IKEv1 daemon pluto and IKEv2 daemon
+ charon. It installs the required packages to run IKEv1 and IKEv2 connections
+ using a ipsec.conf/ipsec.secrets based configuration.
+
+Package: libstrongswan
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}, openssl
+Description: strongSwan utility and crypto library
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ libstrongswan is the underlying library of charon and other strongSwan
+ components. It is built in a modular way and is extendable through various
+ plugins.
+
+Package: strongswan-starter
+Architecture: any
+Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan, strongswan-ikev1 | strongswan-ikev2
+Description: strongSwan daemon starter and configuration file parser
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ The starter and the associated "ipsec" script control both pluto and charon
+ from the command line. It parses ipsec.conf and loads the configurations to
+ the daemons. While the IKEv2 daemon can use other configuration backends, the
+ IKEv1 daemon is limited to configurations from ipsec.conf.
+
+Package: strongswan-ikev1
 Architecture: any
 Pre-Depends: debconf | debconf-2.0
-Depends: ${shlibs:Depends}, ${misc:Depends}, bsdmainutils, debianutils (>=1.7), ipsec-tools, openssl, host, iproute
+Depends: ${shlibs:Depends}, ${misc:Depends}, strongswan-starter, bsdmainutils, debianutils (>=1.7), ipsec-tools, host, iproute
 Suggests: curl
 Provides: ike-server
 Conflicts: freeswan (<< 2.04-12), openswan
 Replaces: openswan
-Description: IPSec utilities for strongSwan
- strongSwan is an open source IPsec implementation for the Linux
- operating system. It is one of the two remaining forks of the 
- original FreeS/WAN projects and focuses on IKEv2 support, X.509 
- authentication and complete PKI support. For a focus on
- Opportunistic Encryption (OE) and interoperability with non-standard
- IPsec features, see Openswan.
- .
- In addition to OE, you may manually configure secure tunnels through
- untrusted networks. Everything passing through the untrusted net is
- encrypted by the IPsec gateway machine and decrypted by the gateway
- at the other end. The result is Virtual Private Network or VPN. This
- is a network which is effectively private even though it includes
- machines at several different sites connected by the insecure Internet.
- .
- Please note that you will need a recent kernel (>=2.4.24 or 2.6.x)
- for using this package. The standard Debian kernel includes both IPsec
- and crypto support, patching the kernel is no longer necessary!
+Description: strongSwan IKEv1 keying daemon
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ Pluto is a IPsec IKEv1 keying daemon. It was inherited from the FreeS/WAN
+ project, but provides improved X.509 certificate support and other features.
+ .
+ Pluto can run in parallel with charon, the newer IKEv2 daemon.
+
+Package: strongswan-ikev2
+Architecture: any
+Pre-Depends: debconf | debconf-2.0
+Depends: ${shlibs:Depends}, ${misc:Depends}, libstrongswan, strongswan-starter | strongswan-nm, bsdmainutils, debianutils (>=1.7), ipsec-tools, host, iproute
+Suggests: curl
+Provides: ike-server
+Conflicts: freeswan (<< 2.04-12), openswan
+Description: strongSwan IKEv2 keying daemon
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ Charon is the IPsec IKEv2 keying daemon of the strongSwan project. It is
+ written from scratch using a fully multi-threaded design and a modular
+ architecture. Various plugins provide additional functionality.
+ .
+ This build of charon can run in parallel with pluto, the IKEv1 daemon.
 
-Package: network-manager-strongswan
+Package: strongswan-nm
 Architecture: any
-Depends: ${shlibs:Depends}, strongswan, network-manager (>= 0.7)
+Depends: ${shlibs:Depends}, strongswan-ikev2
+Recommends: network-manager-strongswan
 Description: strongSwan plugin to interact with NetworkManager
- This plugin for NetworkManager allows to configure strongSwan
- and control the IKEv2 daemon directly through DBUS. 
+ strongSwan is a IPsec based VPN solution for the Linux kernel. It uses the
+ native IPsec stack and runs on any recent 2.6 kernel (no patching required).
+ It supports both IKEv1 and the newer IKEv2 protocols.
+ .
+ This plugin provides an interface which allows NetworkManager to configure
+ and control the IKEv2 daemon directly through DBUS. It is designed to work
+ in conjunction with the network-manager-strongswan package, providing
+ a simple graphical frontend to configure IPsec based VPNs.