From aaa0331ecf95ced1e913ac9be50168cf0e7cbb82 Mon Sep 17 00:00:00 2001 From: Rene Mayrhofer Date: Tue, 30 Jan 2007 12:21:07 +0000 Subject: [svn-upgrade] Integrating new upstream version, strongswan (2.8.2) --- doc/toc.html | 1019 ---------------------------------------------------------- 1 file changed, 1019 deletions(-) delete mode 100644 doc/toc.html (limited to 'doc/toc.html') diff --git a/doc/toc.html b/doc/toc.html deleted file mode 100644 index 047833020..000000000 --- a/doc/toc.html +++ /dev/null @@ -1,1019 +0,0 @@ - - - -Introduction to FreeS/WAN - - - - -

Table of Contents

-
-
Introduction -

IPsec, Security for the Internet - Protocol

The FreeS/WAN project

Project goals
Project team

Products containing FreeS/WAN

Information sources

Distribution sites

Links to other sections

-Upgrading to FreeS/WAN 2.x -

New! Built in Opportunistic connections -

Upgrading Opportunistic Encryption to - 2.01 (or later)

-Quickstart Guide to - Opportunistic Encryption -

Purpose

OE "flag day"

Requirements
RPM install

Our Opportunistic Setups -

Full or partial opportunism?

Initiate-only setup

Full Opportunism

-How to Configure Linux FreeS/WAN with - Policy Groups -

What are Policy Groups?

Built-In Security Options

Using Policy Groups

Appendix

-FreeS/WAN FAQ -

Release questions

Modifications and contributions

Will FreeS/WAN work in my environment? -

Will FreeS/WAN work on ... ?

Does FreeS/WAN support ...

Can I ...

Life's little mysteries

Testing in stages

Compilation problems

Interpreting error messages

Why don't you restrict the mailing lists to - reduce spam?

-FreeS/WAN manual pages -

-FreeS/WAN and firewalls -

Calling firewall scripts, named in - ipsec.conf(5)

A complication: IPsec vs. NAT

Other complications

Other packet filters

How it all works: IPsec packet - details

-Linux FreeS/WAN Troubleshooting Guide - -

2. During Negotiation

3. Using a Connection

4. Problem Reporting

4.1 How to ask for help
4.2 Where to ask

5. Additional Notes on Troubleshooting -

-Linux FreeS/WAN Compatibility Guide -

Implemented parts of the IPsec - Specification

Our PF-Key implementation

PF-Key portability

Kernels other than the latest 2.2.x and - 2.4.y

2.0.x kernels
2.2 and 2.4 kernels

Intel Linux distributions other than - Redhat

CPUs other than Intel

IPv6 background

-Interoperating with FreeS/WAN -

Interop at a Glance

Key

Basic Interop Rules
Longer Stories

-Performance of FreeS/WAN -

Published material
Estimating CPU overheads -

Higher performance alternatives -
Other considerations

-Testing FreeS/WAN -

Testing opportunistic connections

Testing with User Mode Linux
Configuration for a testbed network -

Testbed network
Using packet sniffers in testing -

Verifying encryption
Mailing list pointers

-Kernel configuration for FreeS/WAN - -

Labels used

Kernel options for FreeS/WAN

-Other configuration - possibilities -

Some rules of thumb about - configuration

Choosing connection types

Using shared secrets in - production

Using manual keying in production -

Creating keys with ranbits

One tunnel plus advanced routing -

An Opportunistic Gateway

Unencrypted tunnels

-Installing FreeS/WAN -

RPM install

Install from Source

-How to configure FreeS/WAN -

Road Warrior Configuration

What next?

-Linux FreeS/WAN background -

Some DNS background

-FreeS/WAN script examples - -

Poltorak's Firewall script

-How to configure to use "make - check" -

-How to write a "make check" test -

-Current pitfalls -
-
User-Mode-Linux Testing - guide -

-Debugging the kernel with GDB -

Other notes about debugging

-User-Mode-Linux mysteries -
-
Getting more info from uml_netjig - -
-
History and politics of - cryptography -

Introduction

From our project leader

Government promotion of weak crypto

Escrowed encryption
Limited key lengths

Cryptography Export Laws

DES is Not Secure

Press coverage of Linux FreeS/WAN:

-The IPsec protocols -

Cryptographic components

Structure of IPsec

IPsec modes

Tunnel mode
Transport mode

FreeS/WAN parts

Key management

-Mailing lists and newsgroups -

Mailing lists about FreeS/WAN

Usenet newsgroups

-Web links -

The Linux FreeS/WAN Project

The IPsec Protocols

IPsec Implementations

Linux links

Crypto and security links

-Glossary for the Linux FreeS/WAN - project -

-Bibliography for the Linux FreeS/WAN - project -
-
IPsec RFCs and related documents -

What's in the RFCs.tar.gz bundle?

-Distribution Roadmap: What's Where in - Linux FreeS/WAN -

Top directory
Documentation
KLIPS: kernel IP security
Pluto key and connection - management daemon
Utils
Libraries

FreeS/WAN Library
Imported Libraries

-User-Mode-Linux Testing guide - -

-Debugging the kernel with GDB -

Other notes about debugging

-User-Mode-Linux mysteries -
-
Getting more info from uml_netjig - -
-
How to configure to use "make - check" -

-How to write a "make check" test -

-Current pitfalls -
-
Nightly regression testing -
-
How to setup the nightly - build -

- - -- cgit v1.2.3