ipsec-tools/racoon in ubuntu

This package is intended for users and administrators that still want to maintain IPsec (Internet Protocol security) offering end-to-end security for
network traffic at the IP layer. As of now IPsec based VPNs are still supported by all Apple IOS and OSx products and by BSD distributions (NetBSD, FreeBSD).

In 2019 Ubuntu decided to not further maintain ipsec-tools/racoon as development of ipsec-tools has been abandoned on Souceforge. ipsec-tools project there has not provided updates for racoon since 2014. In 2019 also Debian removed package ipsec-tools from further Debian releases (see bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=917847):
"Racoon's lack of support for IKEv2, despite it being stable for a long time, and the availability of next-generation tunneling systems such as wireguard, also would seem to limit its future value. Setkey's functionality has been subsumed by 'ipxfrm'."

But ipsec-tools and racoon are still being maintained by FreeBSD, NetBSD and Apple. NetBSD has published several updates, e. g. fix for CVE-2016-10396 vulnerability and improvements for setkey command. A subset of the upstream changes and some further changes have been packaged into a new version of this PPA (see changelog) and published for the current Ubuntu LTS releases.

Note:
An Ubuntu Jammy (22.04 LTS) version requires update to OpenSSL 3.0, which is still being worked on.

The related source code is now maintained on Github (https://github.com/rdratlos/racoon-ipsec-tools/tree/develop). Branch branches/debian contains the resulting updates for Debian/Ubuntu packages.

For further information, tutorials and instructions please check the Internet. A good manual is available here: https://www.shrew.net/static/help-2.2.x/html/Shrew%20Soft%20VPN%20Client%20Administrators%20Guide.html?Overview.html