strongSwan VPN Client is an official Android application that provides users with a robust solution for establishing a virtual private network (VPN). This app is based on the strongSwan project, a well-known open-source VPN implementation that utilizes the IKEv2 key exchange protocol for secure communication. Users looking to enhance their online privacy and security can download strongSwan VPN Client to protect their data while using public or unsecured networks.
Features:
Uses the IKEv2 key exchange protocol (IKEv1 is *notsupported)
Uses IPsec for data traffic (L2TP is *notsupported)
Full support for changed connectivity and mobility through MOBIKE (or reauthentication)
Supports username/password EAP authentication (namely EAP-MSCHAPv2, EAP-MD5 and EAP-GTC) as well as RSA/ECDSA private key/certificate authentication to authenticate users, EAP-TLS with client certificates is also supported
Combined RSA/ECDSA and EAP authentication is supported by using two authentication rounds as defined in RFC 4739
VPN server certificates are verified against the CA certificates pre-installed or installed by the user on the system. The CA or server certificates used to authenticate the server can also be imported directly into the app.
IKEv2 fragmentation is supported if the VPN server supports it (strongSwan does so since 5.2.1)
Split-tunneling allows sending only certain traffic through the VPN and/or excluding specific traffic from it
Per-app VPN allows limiting the VPN connection to specific apps, or exclude them from using it
The IPsec implementation currently supports the AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2 algorithms
Passwords are currently stored as cleartext in the database (only if stored with a profile)
VPN profiles may be imported from files
Supports managed configurations via enterprise mobility management (EMM)
FAQs:
Is app compatible with all Android devices?
The app is compatible with most Android devices that support the VpnService API. However, some devices from certain manufacturers may lack support, and the app may not work on those devices. It is recommended to check the device compatibility before installing the app.
Can I import VPN profiles and CA certificates into the app?
Yes, you can import VPN profiles and CA certificates from external storage. The app requires the READ_EXTERNAL_STORAGE permission to access and import these files. This feature allows for easy configuration and management of VPN profiles.
Does the app support advanced encryption algorithms?
Yes, the app supports various encryption algorithms, including AES-CBC, AES-GCM, ChaCha20/Poly1305 and SHA1/SHA2. These algorithms ensure the security and confidentiality of your data during transmission.
Conclusion:
In terms of usability, strongSwan VPN Client is designed to be user-friendly, with clear options for configuration and management of VPN profiles. Users can easily navigate the app to set up their connections and make adjustments as needed. The documentation provided by strongSwan offers detailed guidance on server configurations and troubleshooting, ensuring that users have access to the information necessary for successful implementation.
