diff --git a/config/rootfiles/common/strongswan b/config/rootfiles/common/strongswan
index 6981a7ca8..cc6a59e7f 100644
--- a/config/rootfiles/common/strongswan
+++ b/config/rootfiles/common/strongswan
@@ -168,6 +168,7 @@ usr/libexec/ipsec/charon
 usr/libexec/ipsec/scepclient
 usr/libexec/ipsec/starter
 usr/libexec/ipsec/stroke
+usr/libexec/ipsec/xfrmi
 usr/sbin/ipsec
 usr/sbin/swanctl
 #usr/share/man/man1/pki---acert.1
diff --git a/config/rootfiles/core/133/filelists/strongswan b/config/rootfiles/core/133/filelists/strongswan
new file mode 120000
index 000000000..90c727e26
--- /dev/null
+++ b/config/rootfiles/core/133/filelists/strongswan
@@ -0,0 +1 @@
+../../../common/strongswan
\ No newline at end of file
diff --git a/config/rootfiles/core/133/update.sh b/config/rootfiles/core/133/update.sh
index cc9772c35..3b769f42e 100644
--- a/config/rootfiles/core/133/update.sh
+++ b/config/rootfiles/core/133/update.sh
@@ -40,6 +40,7 @@ done
 
 # Stop services
 /etc/init.d/squid stop
+/usr/local/bin/ipsecctrl D
 
 # Extract files
 extract_files
@@ -59,6 +60,7 @@ telinit u
 /usr/local/bin/update-lang-cache
 
 # Start services
+/usr/local/bin/ipsecctrl S
 /etc/init.d/suricata restart
 /etc/init.d/squid start
 
diff --git a/lfs/strongswan b/lfs/strongswan
index 714537e36..e326886cf 100644
--- a/lfs/strongswan
+++ b/lfs/strongswan
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 5.7.2
+VER        = 5.8.0
 
 THISAPP    = strongswan-$(VER)
 DL_FILE    = $(THISAPP).tar.bz2
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 618de96dc2a506f82a162a5abf9263d4
+$(DL_FILE)_MD5 = e05f2d16a7479a2a9591609c256d523a
 
 install : $(TARGET)