Please add support for IKEv2 for IPSec VPN about softethervpn HOT 109 OPEN

You can port openswan or strongswan.

from softethervpn.

Hi guys, please do not add a comment with +1 and instead use the thumbs up button on the first comment. This way it is possible to track how many people want this feature. Cheers

from softethervpn.

Hi, all.

As mentioned in issue #1373, it seems that Android 12 no longer allows adding "legacy" VPNs such as L2TP/IPSec as a new VPN configuration, only IKEv2/IPSec is allowed.

Still can use an OpenVPN client instead, but this will be a problem for users who want to connect with the OS built-in client.

However, given the remaining time until the official release of Android 12, the addition of this new VPN support may have to be rushed a bit.
(But alas, I can't write code. Sorry.)

from softethervpn.

Please refrain from adding +1 comments, which just adds noise.

SoftEtherVPN is free software, so if you want this feature, you have the source code to either add the support yourself, or contract somebody to do it. Adding +1 comments does nothing.

from softethervpn.

IKEv2 would be good for mobile applications, would open up a realm of possibility for native VPN apps for iOS.

from softethervpn.

IKEv2 does not happen because of adding +1

someone has to write code

from softethervpn.

Yes please add IKEv2 support

from softethervpn.

Hi everyone. Just to let you know I needed IPSec/IKEv1 in tunneling mode, so I'm currently working on implementing it in SoftEther and actually investing time in that. Hopefully after that I'll find time to add IKEv2, doing a port from strongswan.
Here's my code (it is a WIP)
https://github.com/moatazelmasry2/SoftEtherVPN/tree/ipsec-tunnel

So if anyone wants to help with IPSec tunneling or with IKEv2 or just need to exchange ideas, I'll be glad to talk

from softethervpn.

Holy molly, this is the longest running issue thread I have ever seen!
But indeed, I will add my +1 for IKEv2 as well.

from softethervpn.

@dnobori

We in NovaVPN attempted to implement support the IKEv2 protocol for the SoftEtherVPN. The work was not finished, despite this we want to share the results with the community.

What was done
Fully implemented support of IKEv2 protocol (Key exchange, create session and tunnel)
Removed Windows support (sorry guys)
Removed IPv6 support for simplicity

What does not work
Traffic is not routed to the Internet for IKEv2 clients. Probably its easy to fix issue.

https://github.com/NovaVPN/SoftEtherVPN

from softethervpn.

One way I see how this could be made is probably borrow parts of OpenIKED (https://github.com/openiked/openiked-portable). Which seems to have a compatible license. But this isn't a library, so still kinda problematic.

from softethervpn.

@pdario
I'm personally using VPN Client Pro but it is not free.
I'm installing on other phones https://github.com/kittoku/Open-SSTP-Client, although you may try https://github.com/kittoku/Minimum-VPN-Client-for-SoftEther-VPN.
Also, you can use any OpenVPN client as well. Or a Wireguard one.

from softethervpn.

from softethervpn.

Can't believe that guys are bargaining for a patch in an open source platform. Can one of the maintainers ( @dnobori ) "kindly" verify that selling a patch is not violating the license policy ?

from softethervpn.

IKEv2 does not happen because of adding +1
someone has to write code

+1

from softethervpn.

I'm strugglling on android 13 as it completely removes support for L2TP. I tried switching to Wireguard, but it's way too techy, I can not get IP from the same sub net of remote LAN.
+1 for IKEv2

from softethervpn.

+1 IKEv2
my vpn didn't work after Android OS upgrade to 13 , only IKEv2 supported in Android13 from the official response

from softethervpn.

IKEv2 is a pretty complex standard. Using a library is probably a possibility, but I didn't find any which would be suitable for SoftEther.
StrongSwan/OpenSwan - are GPL, which wouldn't be compatible with the SoftEther license
OpenIKEv2 is written in C++, while SoftEther is pure C
And that's basically all there is. All other implementations seems to be from other languages, not even remotely compatible with SoftEther.
Implementing in-tree is possible, but requires a lot of effort and time.

from softethervpn.

StrongSwan/OpenSwan - are GPL, which wouldn't be compatible with the SoftEther license

It should be possible to sidestep that issue by letting users download & build StrongSwan/OpenSwan separately from SoftEther, right? SoftEther needs to be able to load their libraries dynamically and then call into them if they're available, but there's no need for SoftEther to actually bundle or distribute them. Would it be possible to consider this approach?

from softethervpn.

@mehrdadn
I'm not a lawyer, but GPL isn't LGPL, which would allow such usage. GPL restricts even the usage of the API headers without changing the whole project license to GPL. The only reason why it works for Linux (Linux being a GPLv2 software) is because of an explicit exemption for the userland API usage - e.g. Linux uses a kind of a modified GPL.
I didn't find such an exemption for StrongSwan/OpenSwan.

from softethervpn.

http://www.vpnusers.com/viewtopic.php?f=7&t=3056
IKEv2 will make me happy with my Lumia. :)

from softethervpn.

It would be really great if IKEv2 is added. SoftEther is a nice and mature project with userspace IPSec implementation, which is very useful in contailers like OpenVZ, where you can't just load kernel modules.

from softethervpn.

If you add IKEV2, I Could migrate from RockhopperVPN and Could connect my Blackberry.

from softethervpn.

@balu88, you can use strongSwan with kernel-libipsec, if you need userspace IPsec implementation (I suppose you use rockhopper only because of that).

from softethervpn.

@ValdikSS, I use Rockhopper because of its easy configuration and administration. But thanks for the info, didn't knew about the lib.
Von: ValdikSS
Gesendet: Montag, 25. August 2014 03:14
An: SoftEtherVPN/SoftEtherVPN
Antwort an: SoftEtherVPN/SoftEtherVPN
Cc: balu88
Betreff: Re: [SoftEtherVPN] Please add support for IKEv2 for IPSec VPN (#13)

ValdikSS [email protected] hat am 25. August 2014 um 03:14 geschrieben:

@balu88, you can use strongSwan with kernel-libipsec, if you need userspace IPsec implementation (I suppose you use rockhopper only because of that).

---

Reply to this email directly or view it on GitHub:
#13 (comment)

from softethervpn.

@balu88, by the way, strongSwan has web-interface and pretty easy to configure (if we talk about openswan/libreswan) and is very thoroughly documented.

from softethervpn.

IKEv2 is very important for me or other blackberry and nokia lumia users. please do support for IKEv2

from softethervpn.

@ValdikSS are u talking about dumm? send link to strongSwan web-interface please.

from softethervpn.

@dnobori - thx for the great SE package. very awesome. do you have a quick start guide on porting strongSwan to SE?

from softethervpn.

@complexi https://wiki.strongswan.org/projects/1/wiki/Manager

do you have a quick start guide on porting strongSwan to SE?

lol

from softethervpn.

@ValdikSS lol indeed. thx for the strongSwan link.

from softethervpn.

IKEv2 is the default method for VPN's in windows 7.

Lack of support is causing allot of issues

from softethervpn.

2015 If IKEv2 isn't supported bump to support it.

from softethervpn.

Support for IKEv2 would be good

from softethervpn.

+1 IKEv2

from softethervpn.

＋1 IKEv2

from softethervpn.

I agree IKEv2 support would be much appreciated.

from softethervpn.

+1 IKEv2

from softethervpn.

Implementing individual cert for IPSEC and OpenVPN is IMNSHO more
important.
On Jun 12, 2016 06:24, "AlexCatch" [email protected] wrote:

IKEv2 would be good for mobile applications, would open up a realm of
possibility for native VPN apps for iOS. I

—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
#13 (comment),
or mute the thread
https://github.com/notifications/unsubscribe/AARer2iSsbB6xupuA2-_78-PXl-dVOleks5qLAingaJpZM4BaQAb
.

from softethervpn.

Also came here to say it would be very nice to see IKEv2 support in the SoftEther project.

from softethervpn.

Yes please add IKEv2 support
+1

from softethervpn.

Any update?

We can not create vpn connection on iOS programatically.

It supports only NEVPNProtocolIPSec or NEVPNProtocolIKEv2

At this point SoftEtherVPN is meanless for iOS Developers 🤒

from softethervpn.

And no news on adding or hint how to make IKEv2 work with SE setup?

from softethervpn.

+1

from softethervpn.

#341

from softethervpn.

#341

New maintainer needed

from softethervpn.

+1 ikev2

from softethervpn.

Please ikev2

from softethervpn.

@macvk more info please?

from softethervpn.

+1 ikev2

from softethervpn.

+1

from softethervpn.

Have you tested Android 8 with new version?

from softethervpn.

+1 need IKEv2

from softethervpn.

I would like to invite @rmrio to this thread as he already did some things of IKEv2

https://github.com/rmrio/SoftEtherVPN/tree/letsgo

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

Any update on this?

from softethervpn.

from softethervpn.

+5

from softethervpn.

+++10

from softethervpn.

Ikr! It's crazy that the developers haven't noticed it for +5 years!

from softethervpn.

Please add IKEv2 support... it's super important!

from softethervpn.

+1

from softethervpn.

+1

from softethervpn.

+1. IKEv2 is safer than IKE. If possible, use IKEv2 only, do not use IKE.

from softethervpn.

+1

from softethervpn.

+1

from softethervpn.

+1, 6 years still no IKEv2

from softethervpn.

from softethervpn.

I need this feature to connect my UDM-Pro to SE server. Would be really greatful if you manage to do it.

from softethervpn.

+1

from softethervpn.

+++10

from softethervpn.

We in NovaVPN attempted to implement support the IKEv2 protocol for the SoftEtherVPN. The work was not finished, despite this we want to share the results with the community.

What was done
Fully implemented support of IKEv2 protocol (Key exchange, create session and tunnel)
Removed Windows support (sorry guys)
Removed IPv6 support for simplicity

What does not work
Traffic is not routed to the Internet for IKEv2 clients. Probably its easy to fix issue.

https://github.com/NovaVPN/SoftEtherVPN

I think this code would be a great jumping off point to get IKEv2 support in the official SoftEther Project. Even if it's not perfect, as long as it's something maybe it can be worked with.

from softethervpn.

＋1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

@dnobori and hard working contributors! Please consider adding IKEv2 support. More and more clients are moving to IKEv2.

Thanks!

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

Otherwise, I may be forced to switch to a different solution if all the major OS's follow suit with Android 12 and newer.

To be clear, I'd rather not do so - it would be a massive pain. I've been using SoftEther VPN for a few years now, and it's been nice so far.

from softethervpn.

You can port openswan or strongswan.

SoftEtherVPN is simple and easy to use on windows, and would be perfect if you could add IKEv2.

from softethervpn.

As android lastest version only supports IKEv2, add the protocol in the windows-based softether in my wishlist.

from softethervpn.

strongswan
I have compiled StrongSwan in windows platform include IKEV2 and work. The Android client can log on the windows strongswan server(host) and visit the host sharefolder. But how to set the gateway on the windows based server side for client's LAN and Internet visit?

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2
definitely needed

from softethervpn.

+1 IKEv2

from softethervpn.

+1 IKEv2

from softethervpn.

I would have thought that Google v. Oracle would have included this as fair use? Being able to replace strongSwan with a substitute is an interoperability question, and would necessarily require its headers. If a user happens to download strongSwan itself (rather than a substitute), it will work too—that's exactly what interoperability is. I'm not sure I see how this is different from that case, but I guess I'm not a lawyer either...

from softethervpn.

@mehrdadn
Well, I did dig the internet for a while about using GPL libraries - the general consensus is that using a GPL library requires switching to GPL.
The Google vs Oracle case, imo, is a bit different - see, originally Oracle never restricted the usage of the Java API for the development of proprietary software (or differently-licensed software). Here this is not the case - GPL explicitely forbids it.

from softethervpn.

@Evengard That's what the FSF and GNU advertise, but as Wikipedia mentions, it's not really the consensus. This bit is particularly noteworthy:

A Novell lawyer has written that dynamic linking not being derivative "makes sense" but is not "clear-cut", and that evidence for good-intentioned dynamic linking can be seen by the existence of proprietary Linux kernel drivers.

If we assume the FSF/GNU's prohibition on dynamic linking is correct, and that merely using the headers is a violation, then what about all these closed-source proprietary Linux kernel modules (such as from NVIDIA)? Are they illegal?

(Edit: That said though, obviously I think it's quite understandable if the project sees this as a risk, regardless of what I or others may believe about the GPL's limits.)

from softethervpn.

Hello, I found myself here looking for a way to connect my Android 13 phone. I understand that, for the time being, it could be done only with a third-party app: what is the suggested one at the moment? Thank you

from softethervpn.