- Home
- Apps
- Communication
- strongSwan VPN Client
- Version
Previous Versions
Requires Android: Android 5.0+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: c428a27e8cfeedd12c16444db16fe9c5f87da9b1
Size: 13.3 MB
What's New:
- Fix for existing shortcuts and automation via Intents
# 2.5.0 #
- Support for managed configurations via enterprise mobility management (EMM)
Requires Android: Android 5.0+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 4d49c17186ed5096e397b141a1ba56b8895a9d4c
Size: 13.3 MB
What's New:
- Support for managed configurations via enterprise mobility management (EMM)
Requires Android: Android 5.0+
Architecture: arm64-v8a
Screen DPI: 160-640dpi
SHA1: bc15912542aa20ee24d69777ec29e9ba8d2614e7
Size: 10.16 MB
What's New:
- Support for managed configurations via enterprise mobility management (EMM)
Requires Android: Android 5.0+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: cd6de1e33d24ca0e21a0316c8f154e3f2c17a791
Size: 12.83 MB
What's New:
- Increased target SDK to Android 13 and ask for permission to show status notification
- Enable hardware acceleration in OpenSSL
- Use a more stable approach to determine source IP
Requires Android: Android 5.0+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: b0749472987f4fa1006bad3e63fc98ee07e7a561
Size: 12.08 MB
What's New:
- Switched from BoringSSL to OpenSSL
- Added support for the following algorithms: Curve448 ECDH, AES-CCM, Camellia (CBC/CTR/XCBC), SHA-3 (HMAC/PKCS#1)
- Fixed an issue that caused file descriptor leaks when fetching OCSP/CRLs
- Improved translation for simplified Chinese
- Correctly included Ukrainian translation
- Increased minimum SDK version to 21 (Android 5.0)
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: a68f923640839993ac9c728cec9537adfd41eaa0
Size: 7.63 MB
What's New:
- Adds a button to install user certificates
# 2.3.2 #
- Don't mark VPN connections as metered (the default changed when targeting Android 10 with the last release)
# 2.3.1 #
- Optionally use IPv6 transport addresses for IKE and ESP. Can only be enabled if the server supports UDP encapsulation for IPv6 (the Linux kernel only supports this since 5.8, so many servers will not support it yet)
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 7a5a4298b20f4d8039c0457971e1d3d3717d59ae
Size: 6.97 MB
What's New:
- Don't mark VPN connections as metered (the default changed when targeting Android 10 with the last release)
# 2.3.1 #
- Optionally use IPv6 transport addresses for IKE and ESP. Can only be enabled if the server supports UDP encapsulation for IPv6 (the Linux kernel only supports this since 5.8, so many servers will not support it yet)
- Shows an error message if the UUID in a profile is invalid (e.g. contains no dashes)
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 714167843f01ca5bbffa08a77ba2701fa817761a
Size: 6.97 MB
What's New:
- Optionally use IPv6 transport addresses for IKE and ESP. Can only be enabled if the server supports UDP encapsulation for IPv6 (the Linux kernel only supports this since 5.8, so many servers will not support it yet)
- Shows an error message if the UUID in a profile is invalid (e.g. contains no dashes)
- Fixes a potential crash with the power whitelist dialog and handles screen rotation and other Activity restarts better if the corresponding information dialog is shown
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 403f0b6e79d86e90ed7cb9f41e66aaba08f34092
Size: 6.56 MB
What's New:
- Reachabililty in Android's deep sleep phases is improved (requires disabling battery optimizations)
- Restores the app icon on Android < 5
# 2.2.1 #
- Fixes loading CRL/OCSP via HTTP on Android 9
# 2.2.0 #
- Makes the client's IKE identity configurable also when using EAP authentication
- The certificate identity is now configured via text field with auto-completion instead of a drop-down field
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 7b89024d347bcd71f64f4ac0f121c49b9fad8565
Size: 6.55 MB
What's New:
- Fixes loading CRL/OCSP via HTTP on Android 9
# 2.2.0 #
- Makes the client's IKE identity configurable also when using EAP authentication
- The certificate identity is now configured via text field with auto-completion instead of a drop-down field
- Fixes an issue with ECDSA certificate selection on Android 10
- Uses a newer API to detect network changes
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: ba740922e3c26924ecc3ee070c6c82b3786bc407
Size: 6.54 MB
What's New:
- Makes the client's IKE identity configurable also when using EAP authentication
- The certificate identity is now configured via text field with auto-completion instead of a drop-down field
- Fixes an issue with ECDSA certificate selection on Android 10
- Uses a newer API to detect network changes
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 3f4854ba71b7d1659b127b3ea75a7aea170bd043
Size: 6.16 MB
What's New:
- Authentication via EAP-MSCHPv2 now supports UTF-8 encoded passwords
- Fixes an issue with upgrades from older versions
# 2.1.0 #
- Adds a copy command to duplicate an existing VPN profile
- Allows configuring custom DNS servers
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 094b18ddac8550a02bee520bc765aa57aa15bd53
Size: 6.15 MB
What's New:
- Adds a copy command to duplicate an existing VPN profile
- Allows configuring custom DNS servers
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: e0893bb60850c744233e236ee60fe92e004082fb
Size: 6.15 MB
What's New:
- Fixes potential DNS leaks on Android 9
# 2.0.1 #
- Fixes an issue with commercial VPN providers
# 2.0.0 #
- Support for Always-on VPN (Android 7+)
- Quick Settings tile to initiate/terminate the VPN (Android 7+)
- Automatic reconnect if fatal errors occur (e.g. authentication failures)
- Traffic is blocked while connecting/recovering from errors (Android 5+)
- Options to disable OCSP/CRL
- Option to enable strict revocation check via OCSP/CRL
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: f2e0aed0d3765e17f00285d406670a0e4794539e
Size: 6.14 MB
What's New:
- Fixes an issue with commercial VPN providers
# 2.0.0 #
- Support for Always-on VPN (Android 7+)
- Quick Settings tile to initiate/terminate the VPN (Android 7+)
- Automatic reconnect if fatal errors occur (e.g. authentication failures)
- Traffic is blocked while connecting/recovering from errors (Android 5+)
- Options to disable OCSP/CRL
- Option to enable strict revocation check via OCSP/CRL
- Option to enable PSS encoding for RSA signatures
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi-v7a, x86, x86_64
Screen DPI: 160-640dpi
SHA1: d4adc9742c01a1b925900c872acf941580a56b9e
Size: 6.15 MB
What's New:
- Support for Always-on VPN (Android 7+)
- Quick Settings tile to initiate/terminate the VPN (Android 7+)
- Automatic reconnect if fatal errors occur (e.g. authentication failures)
- Traffic is blocked while connecting/recovering from errors (Android 5+)
- Options to disable OCSP/CRL
- Option to enable strict revocation check via OCSP/CRL
- Option to enable PSS encoding for RSA signatures
- Basic support for EAP-TTLS/EAP-PEAP
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 16d135626521657e8415e1e831e16412ec564d96
Size: 8.72 MB
What's New:
- Always sends the user certificate (if applicable)
# 1.9.5 #
- IKE/ESP algorithms configurable
- Removes MODP-1024 from the default IKEv2 proposal. If the server only allows this DH group, a custom IKE proposal has to be configured in the VPN profile
# 1.9.4 #
- Supports delta CRLs
# 1.9.3 #
- Verifies server certificates via OCSP
- Caches CRLs in the app directory (can be cleared via main menu)
- Adds a 'reconnect' button in the 'currently connected' dialog
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 076361df18cdd56859c420b167c44af85fee90a7
Size: 8.72 MB
What's New:
- IKE/ESP algorithms configurable
# 1.9.4 #
- Supports delta CRLs
- Bug fixes (see website for details)
# 1.9.3 #
- Verifies server certificates via OCSP
- Caches CRLs in the app directory (can be cleared via main menu)
- Adds a 'reconnect' button in the 'currently connected' dialog
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: fe840bdd4d85b73842d4ca03f0230cf091098027
Size: 8.68 MB
What's New:
- Supports delta CRLs
- Bug fixes (see website for details)
# 1.9.3 #
- Verifies server certificates via OCSP
- Caches CRLs in the app directory (can be cleared via main menu)
- Adds a 'reconnect' button in the 'currently connected' dialog
# 1.9.2 #
- Split-tunneling on client (specify/exclude traffic to route via VPN)
- Per-app VPN (specify/exclude apps that use the VPN)
- Imports profiles via SAF
- Fetches CRLs via simple HTTP/S fetcher
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 95b9df17fd347f6624cb755fbd3b8651fcf06b02
Size: 8.42 MB
What's New:
- Supports split-tunneling on client (only route certain traffic via VPN and/or exclude traffic from the VPN)
- Supports per-app VPN (allow only certain apps to use the VPN or exclude apps from using it)
- Certificate requests may be disabled
- NAT-T keepalive interval is configurable
- Imports profiles via SAF
- Fetches CRLs via simple HTTP/S fetcher
- More efficient log view
- Disconnect button in notification
- Handles backslashes in usernames
- Adds Traditional Chinese translation
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 8c67f5ddf5d91e6bdc514593af67075eb544cfcf
Size: 8.42 MB
What's New:
- Supports split-tunneling on client (only route certain traffic via VPN and/or exclude traffic from the VPN)
- Supports per-app VPN (allow only certain apps to use the VPN or exclude apps from using it)
- Certificate requests may be disabled
- NAT-T keepalive interval is configurable
- Imports profiles via SAF
- Fetches CRLs via simple HTTP/S fetcher
- More efficient log view
- Disconnect button in notification
- Handles backslashes in usernames
- Adds Traditional Chinese translation
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 91178991146a24c649952479fd3fcdd3d2da252d
Size: 8.3 MB
What's New:
- Supports importing VPN profiles from files
- Simplified Chinese translation (1.8.1)
- Fixes an issue while disconnecting on certain devices (1.8.2)
# 1.7.1/1.7.2 #
- Re-adds support for ECC Brainpool DH groups
- Fixes a crash on older Android releases
# 1.7.0 #
- Permanent notification while connected (or connecting)
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Logs the installed DNS servers
- Switch to BoringSSL
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: f21f039ce66c45df2082271197472c4cec2cf40f
Size: 8.28 MB
What's New:
- Supports importing VPN profiles from files
- Simplified Chinese translation (1.8.1)
# 1.7.1/1.7.2 #
- Re-adds support for ECC Brainpool DH groups
- Fixes a crash on older Android releases
# 1.7.0 #
- Adds a permanent notification while connected (or connecting), which should prevent Android from terminating the VpnService instance when low on memory.
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Logs the installed DNS servers
- Switch to BoringSSL
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 3181d3997a69af2128bb288d5baf42eaa21f0164
Size: 8.28 MB
What's New:
- Supports importing VPN profiles from files
# 1.7.1/1.7.2 #
- Re-adds support for ECC Brainpool DH groups
- Fixes a crash on older Android releases
# 1.7.0 #
- Adds a permanent notification while connected (or connecting), which should prevent Android from terminating the VpnService instance when low on memory.
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Validation of port and MTU
- Logs the installed DNS servers
- Uses BoringSSL instead of OpenSSL
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: dbafce4eeb64221ec8757e1bdea6dd576ffb3772
Size: 7.91 MB
What's New:
- Re-adds support for ECC Brainpool DH groups
# 1.7.1 #
- Fixes a crash on older Android releases
# 1.7.0 #
- Adds a permanent notification while connected (or connecting), which should prevent Android from terminating the VpnService instance when low on memory.
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Validation of port and MTU
- Logs the installed DNS servers
- Uses BoringSSL instead of OpenSSL
- Based on strongSwan 5.5.1
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: b8e5f055e6abda9d790b8b5a9df9ebb4432a4293
Size: 7.9 MB
What's New:
- Fixes a crash on older Android releases
# 1.7.0 #
- Adds a permanent notification while connected (or connecting) that shows the current status and which allows running the VpnService instance as foreground service, which in turn should prevent Android from terminating it when low on memory.
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Validation of port and MTU
- Logs the installed DNS servers
- Uses BoringSSL instead of OpenSSL
- Based on strongSwan 5.5.1
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: b9577a4eb2446fea91acdd77802d3171f9997e1b
Size: 7.9 MB
What's New:
- Adds a permanent notification while connected (or connecting) that shows the current status and which allows running the VpnService instance as foreground service, which in turn should prevent Android from terminating it when low on memory.
- Supports the ChaCha20/Poly1305 AEAD and Curve25519 DH algorithms
- Properly validates entered server port and MTU values in the GUI
- Logs the installed DNS servers
- Uses BoringSSL instead of OpenSSL
- Based on strongSwan 5.5.1
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: 37191e52521a9b8d60f150c506a12daf9874044e
Size: 8.86 MB
What's New:
- Fixes a crash when importing certificates
- Fixes an interoperability issue with Windows Server
# 1.6.0 #
- Configuration of the server identity. If set, it is sent as IDr during authentication and must match exactly (i.e. disables loose identity matching)
- Selection of the client identity with certificate authentication
- GUI changes: Removed progress dialogs, updated profile editor (order, labels, helper texts)
- NAT-T keepalive interval increased to 45s
- 64-bit build
Requires Android: Android 4.0.3+
Architecture: arm64-v8a, armeabi, mips, mips64, x86, x86_64
Screen DPI: 160-640dpi
SHA1: eab1a044e6bd8b3580bc74273de6b5b98bb372e9
Size: 8.86 MB
What's New:
- Fixes an interoperability issue with Windows Server
# 1.6.0 #
- Based on 5.4.0 (e.g. supports IKE redirection)
- Configuration of the server identity. If set, it is sent as IDr during authentication and must match exactly (i.e. disables loose identity matching)
- Selection of the client identity with certificate authentication
- GUI changes: Removed progress dialogs, updated profile editor (order, labels, helper texts)
- NAT-T keepalive interval increased to 45s
- 64-bit build