Package: ocserv (1.3.0-1 and others)

[ Source: ocserv  ]

OpenConnect VPN server compatible with Cisco AnyConnect VPN

OpenConnect server (ocserv) is an SSL VPN server. Its purpose is to be a secure, small, fast and configurable VPN server. It implements the OpenConnect SSL VPN protocol, and has also (currently experimental) compatibility with clients using the AnyConnect SSL VPN protocol. The OpenConnect VPN protocol uses the standard IETF security protocols such as TLS 1.2, and Datagram TLS to provide the secure VPN service. The server is implemented primarily for the GNU/Linux platform but its code is designed to be portable to other UNIX variants as well.

Ocserv's main feature is isolation of the VPN users from the main VPN server process. Each authenticated user is assigned an unprivileged worker process, and a networking (tun) device. That not only eases the control of the resources of each user or group of users, but also prevents privilege escalation due to any bug on the VPN handling (worker) server. Each VPN user can be authenticated using password, PAM, public key (in a smart card or not) or any combination of methods.

Tags: Implemented in: C, User Interface: Daemon, Networking: Server, network::vpn, role::program

Other Packages Related to ocserv

• dep: init-system-helpers (>= 1.54~)

  helper tools for all init systems

• dep: adduser [not alpha, ia64, m68k, sh4, sparc64]

  add and remove users and groups

• dep: dbus [alpha, ia64, m68k, sh4, sparc64]

  simple interprocess messaging system (system message bus)

• dep: libc6 (>= 2.17) [m68k, sparc64]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6-udeb

  dep: libc6 (>= 2.27) [sh4]

  dep: libc6 (>= 2.38) [not alpha, ia64, m68k, sh4, sparc64]

• dep: libc6.1 (>= 2.27) [alpha, ia64]

  GNU C Library: Shared libraries
  also a virtual package provided by libc6.1-udeb

• dep: libcrypt1 (>= 1:4.1.0) [not alpha, ia64, m68k, sh4, sparc64]

  libcrypt shared library

• dep: libev4 (>= 1:4.04) [alpha, ia64, m68k, sh4, sparc64]

  high-performance event loop library modelled after libevent

• dep: libev4t64 (>= 1:4.04) [not alpha, ia64, m68k, sh4, sparc64]

  high-performance event loop library modelled after libevent

• dep: libgeoip1 [alpha, ia64, m68k, sh4, sparc64]

  non-DNS IP-to-country resolver library

• dep: libgnutls30 (>= 3.5.9) [alpha, ia64, m68k, sh4, sparc64]

  GNU TLS library - main runtime library

• dep: libgnutls30t64 (>= 3.8.4) [ppc64]

  GNU TLS library - main runtime library

  dep: libgnutls30t64 (>= 3.8.6) [not alpha, ia64, m68k, ppc64, sh4, sparc64]

• dep: libgssapi-krb5-2 (>= 1.14+dfsg)

  MIT Kerberos runtime libraries - krb5 GSS-API Mechanism

• dep: libhttp-parser2.8 (>= 2.1) [alpha, ia64, m68k, sh4, sparc64]

  Package not available

• dep: liblz4-1 (>= 0.0~r130)

  Fast LZ compression algorithm library - runtime

• dep: libmaxminddb0 (>= 1.0.2) [not alpha, ia64, m68k, sh4, sparc64]

  IP geolocation database library

• dep: libnettle6 [alpha, ia64, m68k, sh4, sparc64]

  Package not available

• dep: libnettle8t64 [not alpha, ia64, m68k, sh4, sparc64]

  low level cryptographic library (symmetric and one-way cryptos)

• dep: libnl-3-200 (>= 3.2.7)

  library for dealing with netlink sockets

• dep: libnl-route-3-200 (>= 3.2.7)

  library for dealing with netlink sockets - route interface

• dep: liboath0 (>= 1.8.0) [alpha, ia64, m68k, sh4, sparc64]

  OATH Toolkit Liboath library

• dep: liboath0t64 (>= 1.8.0) [not alpha, ia64, m68k, sh4, sparc64]

  OATH Toolkit Liboath library

• dep: libpam0g (>= 0.99.7.1)

  Pluggable Authentication Modules library

• dep: libpcl1 [alpha, ia64, m68k, sh4, sparc64]

  Portable Coroutine Library (PCL)

• dep: libprotobuf-c1 (>= 1.0.1)

  Protocol Buffers C shared library (protobuf-c)

• dep: libradcli4 [alpha, ia64, m68k, sh4, sparc64]

  Enhanced RADIUS client library

  dep: libradcli4 (>= 1.2.11) [not alpha, ia64, m68k, sh4, sparc64]

• dep: libreadline7 (>= 6.0) [alpha, ia64, m68k, sh4, sparc64]

  Package not available

• dep: libreadline8t64 (>= 6.0) [not alpha, ia64, m68k, sh4, sparc64]

  GNU readline and history libraries, run-time libraries

• dep: libseccomp2 (>= 0.0.0~20120605) [not alpha, ia64, m68k, sh4, sparc64]

  high level interface to Linux seccomp filter

• dep: libsystemd0

  systemd utility library

• dep: libtalloc2 (>= 2.0.4~git20101213)

  hierarchical pool based memory allocator

• dep: libtasn1-6 (>= 4.12) [alpha, ia64, m68k, sh4, sparc64]

  Manage ASN.1 structures (runtime)

  dep: libtasn1-6 (>= 4.14) [not alpha, ia64, m68k, sh4, sparc64]

• dep: libwrap0 (>= 7.6-4~) [alpha, ia64, m68k, sh4, sparc64]

  Wietse Venema's TCP wrappers library

• dep: lsb-base [alpha, ia64, m68k, sh4, sparc64]

  transitional package for Linux Standard Base init script functionality

• dep: ssl-cert

  simple debconf wrapper for OpenSSL

• rec: ca-certificates

  Common CA certificates

• rec: dnsmasq [not alpha, ia64, m68k, sh4, sparc64]

  Small caching DNS proxy and DHCP/TFTP server - system daemon

• rec: gnutls-bin [not alpha, ia64, m68k, sh4, sparc64]

  GNU TLS library - commandline utilities

• rec: iproute2 [not alpha, ia64, m68k, sh4, sparc64]

  networking and traffic control tools

• rec: iputils-ping [not alpha, ia64, m68k, sh4, sparc64]

  Tools to test the reachability of network hosts

  or inetutils-ping

  ICMP echo tool

• rec: nuttcp [not alpha, ia64, m68k, sh4, sparc64]

  network performance measurement tool

• sug: freeradius [not alpha, ia64, m68k, sh4, sparc64]

  high-performance and highly configurable RADIUS server

• sug: gnutls-bin [alpha, ia64, m68k, sh4, sparc64]

  GNU TLS library - commandline utilities

• sug: haproxy [not alpha, ia64, m68k, sh4, sparc64]

  fast and reliable load balancing reverse proxy

Download ocserv

Download for all available architectures

Architecture	Version	Package Size	Installed Size	Files
alpha (unofficial port)	0.12.1-1	299.0 kB	826.0 kB	[list of files]
amd64	1.3.0-1	509.7 kB	1,248.0 kB	[list of files]
arm64	1.3.0-1	499.1 kB	1,460.0 kB	[list of files]
armel	1.3.0-1	474.0 kB	1,120.0 kB	[list of files]
armhf	1.3.0-1	478.8 kB	964.0 kB	[list of files]
hppa (unofficial port)	1.3.0-1	480.9 kB	1,111.0 kB	[list of files]
i386	1.3.0-1	521.6 kB	1,300.0 kB	[list of files]
ia64 (unofficial port)	0.12.1-1	336.5 kB	1,157.0 kB	[list of files]
m68k (unofficial port)	0.12.1-1	283.3 kB	690.0 kB	[list of files]
mips64el	1.3.0-1	501.3 kB	1,588.0 kB	[list of files]
ppc64 (unofficial port)	1.3.0-1	513.0 kB	1,652.0 kB	[list of files]
ppc64el	1.3.0-1	520.7 kB	1,588.0 kB	[list of files]
riscv64	1.3.0-1	519.5 kB	1,173.0 kB	[list of files]
s390x	1.3.0-1	499.8 kB	1,276.0 kB	[list of files]
sh4 (unofficial port)	0.12.1-1	315.6 kB	648.0 kB	[list of files]
sparc64 (unofficial port)	0.12.1-1	264.8 kB	732.0 kB	[list of files]
x32 (unofficial port)	1.3.0-1	508.5 kB	1,172.0 kB	[list of files]