Fedora 43 native package

libreswan

Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec

Packages / Fedora 43 / Unspecified / libreswan

[Source: libreswan]

Package: libreswan (5.3-3.fc43)

External Resources:

Homepage: [libreswan.org]

Similar packages:

[libreswan-minimal]
Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec (minimal version)

Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec

Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is the Internet Protocol Security and uses strong cryptography to provide both authentication and encryption services. These services allow you to build secure tunnels through untrusted networks. Everything passing through the untrusted net is encrypted by the ipsec gateway machine and decrypted by the gateway at the other end of the tunnel. The resulting tunnel is a virtual private network or VPN. This package contains the daemons and userland tools for setting up Libreswan. Libreswan also supports IKEv2 (RFC7296) and Secure Labeling Libreswan is based on Openswan-2.6.38 which in turn is based on FreeS/WAN-2.04

Other Packages Related to libreswan:

dep: /bin/sh
Package not available
dep: /bin/sh
Package not available
dep: filesystem(unmerged-sbin-symlinks)
Package not available
dep: [iproute] (>= 2.6.8)
Advanced IP routing and network device configuration tools
dep: libreswan-minimal(aarch-64) (= 5.3-3.fc43)
Package not available
dep: [logrotate]
Rotates, compresses, removes and mails system log files
dep: [nss] (>= 3.52)
Network Security Services
dep: [nss-softokn]
Network Security Services Softoken Module
dep: [procps-ng]
System and process monitoring utilities
dep: [systemd]
System and Service Manager
dep: [systemd]
System and Service Manager

Download libreswan

Architecture	Package Size	Installed Size	Files
aarch64	336 KiB	632 KiB	[list of files]
x86_64	336 KiB	632 KiB	[list of files]

Package file paths (105)

Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.

/usr/lib/systemd/system/ipsec.service
/usr/share/doc/libreswan
/usr/share/doc/libreswan/CHANGES
/usr/share/doc/libreswan/CHANGES.freeswan.pluto
/usr/share/doc/libreswan/CHANGES.openswan
/usr/share/doc/libreswan/COPYING
/usr/share/doc/libreswan/CREDITS
/usr/share/doc/libreswan/CREDITS.freeswan
/usr/share/doc/libreswan/CREDITS.openswan
/usr/share/doc/libreswan/examples
/usr/share/doc/libreswan/examples/hub-spoke.conf
/usr/share/doc/libreswan/examples/ipv6.conf
/usr/share/doc/libreswan/examples/l2tp-cert.conf
/usr/share/doc/libreswan/examples/l2tp-psk.conf
/usr/share/doc/libreswan/examples/linux-linux.conf
/usr/share/doc/libreswan/examples/oe-authnull.conf
/usr/share/doc/libreswan/examples/oe-dnssec-client.conf
/usr/share/doc/libreswan/examples/oe-dnssec-server.conf
/usr/share/doc/libreswan/examples/oe-exclude-dns.conf
/usr/share/doc/libreswan/examples/oe-letsencrypt-client.conf
/usr/share/doc/libreswan/examples/oe-letsencrypt-README.txt
/usr/share/doc/libreswan/examples/oe-letsencrypt-server.conf
/usr/share/doc/libreswan/examples/oe-upgrade-authnull.conf
/usr/share/doc/libreswan/examples/sysctl.conf
/usr/share/doc/libreswan/examples/xauth.conf
/usr/share/doc/libreswan/GSoC.md
/usr/share/doc/libreswan/l2tp-overhead.txt
/usr/share/doc/libreswan/LICENSE
/usr/share/doc/libreswan/nss-howto.txt
/usr/share/doc/libreswan/opportunistic-v1.historic
/usr/share/doc/libreswan/opportunistic-v1.historic/opportunism.nr
/usr/share/doc/libreswan/opportunistic-v1.historic/opportunism-spec.txt
/usr/share/doc/libreswan/PlutoFlow.png
/usr/share/doc/libreswan/PlutoFlow.svg
/usr/share/doc/libreswan/pluto-internals.txt
/usr/share/doc/libreswan/ProgrammingConventions.txt
/usr/share/doc/libreswan/README.IANA-PEN
/usr/share/doc/libreswan/README.labeledipsec
/usr/share/doc/libreswan/README.md
/usr/share/doc/libreswan/README.nss
/usr/share/doc/libreswan/README.rfcs
/usr/share/doc/libreswan/README.x509
/usr/share/doc/libreswan/README.XAUTH
/usr/share/man/man5/ipsec.conf.5.gz
/usr/share/man/man5/ipsec.secrets.5.gz
/usr/share/man/man7/libreswan.7.gz
/usr/share/man/man8/ipsec.8.gz
/usr/share/man/man8/ipsec-add.8.gz
/usr/share/man/man8/ipsec-addconn.8.gz
/usr/share/man/man8/ipsec-algparse.8.gz
/usr/share/man/man8/ipsec-briefconnectionstatus.8.gz
/usr/share/man/man8/ipsec-briefstatus.8.gz
/usr/share/man/man8/ipsec-certutil.8.gz
/usr/share/man/man8/ipsec-checkconfig.8.gz
/usr/share/man/man8/ipsec-checknflog.8.gz
/usr/share/man/man8/ipsec-checknss.8.gz
/usr/share/man/man8/ipsec-connectionstatus.8.gz
/usr/share/man/man8/ipsec-crlutil.8.gz
/usr/share/man/man8/ipsec-delete.8.gz
/usr/share/man/man8/ipsec-down.8.gz
/usr/share/man/man8/ipsec-ecdsasigkey.8.gz
/usr/share/man/man8/ipsec-fetchcrls.8.gz
/usr/share/man/man8/ipsec-fipsstatus.8.gz
/usr/share/man/man8/ipsec-globalstatus.8.gz
/usr/share/man/man8/ipsec-import.8.gz
/usr/share/man/man8/ipsec-initnss.8.gz
/usr/share/man/man8/ipsec-letsencrypt.8.gz
/usr/share/man/man8/ipsec-listall.8.gz
/usr/share/man/man8/ipsec-listcacerts.8.gz
/usr/share/man/man8/ipsec-listcerts.8.gz
/usr/share/man/man8/ipsec-listcrls.8.gz
/usr/share/man/man8/ipsec-listen.8.gz
/usr/share/man/man8/ipsec-listpubkeys.8.gz
/usr/share/man/man8/ipsec-modutil.8.gz
/usr/share/man/man8/ipsec-newhostkey.8.gz
/usr/share/man/man8/ipsec-ondemand.8.gz
/usr/share/man/man8/ipsec-pk12util.8.gz
/usr/share/man/man8/ipsec-pluto.8.gz
/usr/share/man/man8/ipsec-_plutorun.8.gz
/usr/share/man/man8/ipsec-purgeocsp.8.gz
/usr/share/man/man8/ipsec-readwriteconf.8.gz
/usr/share/man/man8/ipsec-redirect.8.gz
/usr/share/man/man8/ipsec-replace.8.gz
/usr/share/man/man8/ipsec-rereadall.8.gz
/usr/share/man/man8/ipsec-rereadcerts.8.gz
/usr/share/man/man8/ipsec-rereadsecrets.8.gz
/usr/share/man/man8/ipsec-restart.8.gz
/usr/share/man/man8/ipsec-route.8.gz
/usr/share/man/man8/ipsec-rsasigkey.8.gz
/usr/share/man/man8/ipsec-setup.8.gz
/usr/share/man/man8/ipsec-showhostkey.8.gz
/usr/share/man/man8/ipsec-showroute.8.gz
/usr/share/man/man8/ipsec-showstates.8.gz
/usr/share/man/man8/ipsec-shuntstatus.8.gz
/usr/share/man/man8/ipsec-start.8.gz
/usr/share/man/man8/ipsec-status.8.gz
/usr/share/man/man8/ipsec-stop.8.gz
/usr/share/man/man8/ipsec-trafficstatus.8.gz
/usr/share/man/man8/ipsec-unroute.8.gz
/usr/share/man/man8/ipsec-up.8.gz
/usr/share/man/man8/ipsec-_updown.8.gz
/usr/share/man/man8/ipsec-_updown.xfrm.8.gz
/usr/share/man/man8/ipsec-vfychain.8.gz
/usr/share/man/man8/ipsec-whack.8.gz
/usr/share/man/man8/pluto.8.gz

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

Use this package

OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.

Try Fedora 43 in the browser Build an image that includes libreswan

Versions, suites, and repositories

Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.

Version	Release	Architecture	Repository	Package size	Installed size	Publisher repository artifact
5.3-3.fc43	43 / everything	aarch64	Fedora 43 · Everything · aarch64	335 KiB	631 KiB	Packages/l/libreswan-5.3-3.fc43.aarch64.rpm
5.3-3.fc43	43 / everything	x86_64	Fedora 43 · Everything · x86_64	335 KiB	631 KiB	Packages/l/libreswan-5.3-3.fc43.x86_64.rpm
5.3.2-2.fc43	43 / updates	aarch64	Fedora 43 · updates · aarch64	336 KiB	632 KiB	Packages/l/libreswan-5.3.2-2.fc43.aarch64.rpm
5.3.2-2.fc43	43 / updates	x86_64	Fedora 43 · updates · x86_64	336 KiB	632 KiB	Packages/l/libreswan-5.3.2-2.fc43.x86_64.rpm

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

Checksums and observation dates

For an APT source, signature verification authenticates the repository metadata chain and the Packages index containing this source-reported artifact digest. It does not certify package safety.

5.3-3.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: 672354d5c12231667540cf7093c34dc1a33b9cca9ca585c59b40d5db47403ed7

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' '672354d5c12231667540cf7093c34dc1a33b9cca9ca585c59b40d5db47403ed7' 'libreswan-5.3-3.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2

5.3-3.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: ab3443a23acdd4d6d5e7a3a6713ba9ceec820bf158a285b2a6827b2e84684273

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'ab3443a23acdd4d6d5e7a3a6713ba9ceec820bf158a285b2a6827b2e84684273' 'libreswan-5.3-3.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2

5.3.2-2.fc43 / aarch64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: f4626855f56e718ce361f5acf5096c6b331fe971af17c358d43becf581c3e3ee

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'f4626855f56e718ce361f5acf5096c6b331fe971af17c358d43becf581c3e3ee' 'libreswan-5.3.2-2.fc43.aarch64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac

5.3.2-2.fc43 / x86_64Observed Sep 1, 2026 to Sep 1, 2026

Verification status: Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.

Source-reported sha256: b061df1ff2df13402e96ad115e71292dfed4abc1ba91d042f284ad84a3ec6d88

After downloading that exact artifact, compare its bytes with the source-reported expected digest:

printf '%s  %s\n' 'b061df1ff2df13402e96ad115e71292dfed4abc1ba91d042f284ad84a3ec6d88' 'libreswan-5.3.2-2.fc43.x86_64.rpm' | sha256sum --check --strict -

A match establishes equality with the repository metadata value. It does not establish safety or catalog-side artifact retrieval.

Field source: Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a

Catalog record completeness

The completeness score measures metadata coverage, not software quality, security, compatibility, or suitability.

Summary and description: 25/25
Artifact path and source digest: 25/25
Dependency metadata: 15/15
Package-file index: 15/15
Homepage: 5/5
License text: 5/5
Source package or maintainer: 10/10

Recorded total: 100/100

Field source: Fedora 43 Everything aarch64 revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2, Fedora 43 Everything x86_64 revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2, Fedora 43 updates aarch64 revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac, Fedora 43 updates x86_64 revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a. The cross-OS mapping is catalog-derived from the source-reported homepage; it does not establish authorship or publisher identity

Sources and provenance

Field-source links above resolve here. Each source entry names the metadata publisher, trust tier, exact snapshot revision, signature result, and observation time; catalog-derived mappings are labeled separately.

Fedora 43 Everything aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-aarch64:6431612747d987257399969298151d19cfe87ed26322be6987e7b00cd0ae66a2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=aarch64
Signed-object SHA-256
6c2a7b7225a6bd12acd5c95dcd0350a0a5929e195692ff68eb31db0ee6b9897b
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 Everything x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-everything-x86_64:eb1d8634a798b5cfcef64b0114711f431f2cd186b55cce902f1883a32c6ff4f2
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=fedora-43&arch=x86_64
Signed-object SHA-256
42c0002750de6066124693fff143f4854c1e29474d893f7e6a7616012d41338f
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates aarch64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-aarch64:ac6921c749da1e864e0971122151b63bb17e427965b3d9f9312a07b49ff10cac
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=aarch64
Signed-object SHA-256
0af1807dead0a1d28599a942743e244fe57da21cf6a935b3e4155f4a3f1070a1
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified
Fedora 43 updates x86_64Sep 1, 2026
Authoritative source; repository metadata signature verified, revision 43-updates-x86_64:d59481a1758810a842f6aaef03eff437442211002d934e2d10266183c629137a
Signature verification covers the configured repository metadata chain. It does not certify that the package is safe or suitable.
Repository-signature verification record
Signed object
https://mirrors.fedoraproject.org/metalink?repo=updates-released-f43&arch=x86_64
Signed-object SHA-256
3ae5fecc3db8c7b4ce0cf54a8ea572ed4694e7e132e201c2f6ab6570259d1061
Signer fingerprint
Not recorded
Keyring revision
RPM-GPG-KEY-fedora-43-primary
SHA-256 2b1449a082d3264dda8e18369f04e9ac4163bf3f8cb530b0783dc2ab064a08ec
Tool and policy
1
openfactory-software-catalog-signature-v1
Verification time
Sep 1, 2026
Signed Release → package-index hash linkage
Path: Not recorded
Expected SHA-256: Not recorded
Observed SHA-256: Not recorded
Result: match verified