strongSwan VPN Client

About strongSwan VPN Client

strongSwan is a comprehensive implementation of the Internet Key Exchange (IKE) protocols that allows securing IP traffic in policy- and route-based IPsec scenarios from simple to very complex. The focus of strongSwan is on simplicity of configuration, strong encryption and authentication methods, powerful IPsec policies supporting large and complex VPN networks and modular design with great extensibility and portability.

Key Features

-Uses the VpnService API featured by Android 4+. Devices by some manufacturers seem to lack support for this - strongSwan VPN Client won't work on these devices!

-Uses the IKEv2 key exchange protocol (IKEv1 is *not* supported)

-Uses IPsec for data traffic (L2TP is *not* supported)

-Full support for changed connectivity and mobility through MOBIKE (or reauthentication)

-Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS with client certificates is also supported

-Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739

-VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the server can also be imported directly into the app.

-IKEv2 fragmentation is supported if the VPN server supports it (strongSwan does so since 5.2.1)

-Split-tunneling allows sending only certain traffic through the VPN and/or excluding specific traffic from it

-Per-app VPN allows limiting the VPN connection to specific apps, or exclude them from using it

-The IPsec implementation currently supports the AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2 algorithms

-Passwords are currently stored as cleartext in the database (only if stored with a profile)

-VPN profiles may be imported from files

-Supports managed configurations via enterprise mobility management (EMM)

Why You'll Love It

- Lightning-Fast Connections: Experience high-speed VPN connections for all your online activities.

- Easy and Intuitive: A simple, user-friendly interface with no configuration required.

- Enhanced Security: Protect your online activities with a secure, encrypted connection.

Frequently Asked Questions (FAQ)

Q: Does strongSwan support IKEv2 fragmentation?

A: VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system.

Q: Does Android 7 have a VPN?

A: Android 8 only starts the VPN service after the user has unlocked the device after a reboot.

Operating System: Compatible with Android 5.0 and up and iOS 12.0+ devices.

Storage Space: Ensure sufficient free storage for app installation and updates.

Internet Connection: Required for real-time updates, notifications, and fee management.

------------------------------------------------------------

Contact us at the following sites if you encounter any issues:

Official website: here

Contact Us: +41784806506

Email: android@strongswan.org

---------------------------------------------------------

Version History

Last updated on Feb 27, 2025

# 2.5.4 #

- Fix issues when reestablishing the connection

# 2.5.3 #

- Add support for distributing passwords in managed profiles

- Add support for importing profile files with passwords

- Fix crash when editing password of managed profiles

- Fix crash when re-importing an already existing profile