{"id":104136,"date":"2022-05-24T15:36:57","date_gmt":"2022-05-24T13:36:57","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-openbsd-opublikoval-openiked-7-1-perenosimuyu-realizacziyu-protokola-ikev2-dlya-ipsec"},"modified":"2022-05-24T15:36:57","modified_gmt":"2022-05-24T13:36:57","slug":"proekt-openbsd-opublikoval-openiked-7-1-perenosimuyu-realizacziyu-protokola-ikev2-dlya-ipsec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/proekt-openbsd-opublikoval-openiked-7-1-perenosimuyu-realizacziyu-protokola-ikev2-dlya-ipsec","title":{"rendered":"The OpenBSD project has released OpenIKED 7.1, a portable implementation of the IKEv2 protocol for IPsec","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The release of OpenIKED 7.1 has been announced, an implementation of the IKEv2 protocol developed by the OpenBSD project. Originally, IKEv2 components were an inseparable part of the OpenBSD IPsec stack, but now they have been separated into a standalone portable package that can be used on other operating systems. For instance, the operation of OpenIKED has been tested on FreeBSD, NetBSD, macOS, and various Linux distributions including Arch, Debian, Fedora, and Ubuntu. The code is written in C and distributed under the ISC license. <\/p>\n
OpenIKED enables the deployment of virtual private networks based on IPsec. The IPsec stack is formed by two main protocols: the key exchange protocol (IKE) and the encrypted traffic transmission protocol (ESP). OpenIKED implements authentication, configuration, key exchange, and security policy maintenance elements, while the ESP protocol for encrypting traffic is typically provided by the operating systems' kernels. Authentication methods in OpenIKED can include pre-shared keys, EAP MSCHAPv2 with X.509 certificates, and RSA and ECDSA public keys. <\/p>\n
The new version includes the command \u2018ikectl show certinfo\u2019 for displaying loaded certificates and certification authorities, improved support for IKEv2 message fragmentation, expanded flow configuration capabilities, added support for background process isolation using the AppArmor mechanism in Linux, and new tests for identifying regression changes across different platforms. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"