On Fri, May 21, 2004 at 11:52:09AM -0400, Jason Tackaberry wrote: > I'd like to raise the issue here and spark a discussion in the hope > that we can find consensus on one or more pieces of VPN software to > include in Fedora Core 3. Well, FC2 includes ipsec-tools, so I wouldn't say it includes no VPN software. > I have been using and reading about OpenVPN (http://openvpn.sf.net). It > is intuitive, well designed [1], and has excellent documentation. It is > released under the GPL, with a special exception clause to allow linking > with OpenSSL. OpenVPN is quality software, and we would be remiss not to > consider it for inclusion in FC3. There's a OpenVPN package in fedora.us QA: https://bugzilla.fedora.us/show_bug.cgi?id=1531 (Which reminds me, I never did submit a couple of minor fixes I made. Oops.) > OpenVPN is released for most unices (including OS X), as well as Windows > 2000/XP. It relies on the kernel only for the tun/tap device. I have > toyed with other VPN software (notable CIPE, vtun, and freeswan), and > OpenVPN was the only one that Just Worked, and worked intuitively. I can second that. I've used it Linux-to-Linux and Windows-to-Linux and it Just Worked. It has also Just Worked behind a bunch of random firewalls. > I think the other main contender for VPN software in Fedora Core would > be Openswan. OpenVPN is portable, comfortable (being in userspace), > flexible, and easy, but Openswan implements IPsec which is (mostly) > standardized across vendors, and that's certainly a strong selling > point, in spite of its complexity. Like I said, FC2 can already to IPsec. Regardless, I have also been working on an openswan package for fedora.us: https://bugzilla.fedora.us/show_bug.cgi?id=1271 It still needs work, and I haven't even thought about getting it working with the built-in 2.6 IPsec stuff yet. Steve -- Steven Pritchard - K&S Pritchard Enterprises, Inc. Email: steve@xxxxxxxxx http://www.kspei.com/ Phone: (618)398-7360 Mobile: (618)567-7320
