[strongSwan] strongswan VPN client on Android

Andreas Steffen andreas.steffen at strongswan.org
Fri Aug 24 16:39:49 CEST 2012


Hi Nitin,

there is a bachelor thesis available written by the students who
implemented the rapid prototype (Tobias refined it by applying
some heavy refactoring, though)


http://security.hsr.ch/theses/BA_2012_Userland_IPsec_for_Android_4_Report.pdf

It's in German but the diagrams in the report might help you to
understand the Architecture.

Besides the Android Java and JNI frontend code there is also
*libipsec* which does the whole userland ESPinUDP processing:

http://git.strongswan.org/?p=strongswan.git;a=tree;f=src/libipsec;h=ae11aae996c43fa0eb5a3e8376e803d78da60776;hb=HEAD

The latest tarball contains the Android source code:

http://download.strongswan.org/strongswan-5.0.1dr3.tar.bz2

Regards

Andreas

On 08/24/2012 09:14 AM, Tobias Brunner wrote:
> Hi Nitin,
> 
>> I want to explore that how this solution is working on a non rooted
>> device. Can anyone help me understanding how this has been done?
> 
> It uses the VpnService API [1] that Google introduced with Android 4.0,
> which allows Apps to create TUN-Devices without having root permission.
> 
>> Where can I find the source code for this apk or it's unpublished yet?
> 
> The source code is in our Git repository (src/frontends/android).
> 
> Regards,
> Tobias
> 
> [1] http://developer.android.com/reference/android/net/VpnService.html

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==




More information about the Users mailing list