{"id":111628,"date":"2023-11-20T09:10:15","date_gmt":"2023-11-20T07:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec"},"modified":"2023-11-20T09:10:15","modified_gmt":"2023-11-20T07:10:15","slug":"vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec","title":{"rendered":"Sortie d'OpenIKED 7.3, une impl\u00e9mentation portable du protocole IKEv2 pour IPsec","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Le projet OpenBSD a publi\u00e9 la version 7.3 d'OpenIKED, qui d\u00e9veloppe l'impl\u00e9mentation du protocole IKEv2. Initialement, les composants IKEv2 faisaient partie int\u00e9grante de la pile IPsec d'OpenBSD, mais ils ont ensuite \u00e9t\u00e9 isol\u00e9s dans un paquet portable, pouvant \u00eatre utilis\u00e9 dans d'autres syst\u00e8mes d'exploitation. Le fonctionnement d'OpenIKED a \u00e9t\u00e9 v\u00e9rifi\u00e9 sous FreeBSD, NetBSD, macOS et diverses distributions Linux, y compris Arch, Debian, Fedora et Ubuntu. Le code est \u00e9crit en C et est distribu\u00e9 sous la licence ISC.    <\/p>\n<p>OpenIKED permet de d\u00e9ployer des r\u00e9seaux priv\u00e9s virtuels bas\u00e9s sur IPsec. La pile IPsec est compos\u00e9e de deux protocoles principaux : le protocole d'\u00e9change de cl\u00e9s (IKE) et le protocole de transmission de trafic chiffr\u00e9 (ESP). OpenIKED impl\u00e9mente des \u00e9l\u00e9ments d'authentification, de configuration, d'\u00e9change de cl\u00e9s et de mise en \u0153uvre des politiques de s\u00e9curit\u00e9, tandis que le protocole pour chiffrer le trafic ESP est g\u00e9n\u00e9ralement fourni par le noyau des syst\u00e8mes d'exploitation. Parmi les m\u00e9thodes d'authentification, OpenIKED peut utiliser des cl\u00e9s pr\u00e9-partag\u00e9es, EAP MSCHAPv2 avec un certificat X.509 et des cl\u00e9s publiques RSA et ECDSA.    <\/p>\n<p>Dans la nouvelle version :  <\/p>\n<ul>\n<li class=\"l\"> Ajout de la prise en charge des tunnels sec, cr\u00e9\u00e9s dans OpenBSD pour le routage du trafic IPsec \u00e0 travers l'interface r\u00e9seau sec, au lieu d'utiliser des r\u00e8gles SPD (IPsec Security Policy Database) lors de la cr\u00e9ation de connexions s\u00e9curis\u00e9es. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"222\">VPN<\/a> en mode point \u00e0 point.\n<li class=\"l\"> Ajout de la prise en charge de plusieurs <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/fr\/server\/\"   title=\"serveurs\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"1658\">serveurs<\/a> noms avec une seule interface r\u00e9seau sous Linux.\n<li class=\"l\"> Ajout de la possibilit\u00e9 d'utiliser la biblioth\u00e8que libsystemd pour configurer DNS via DBUS sous Linux, au lieu d'appeler l'outil resolvectl.\n<li class=\"l\"> Sur la plateforme Linux, la biblioth\u00e8que libapparmor a \u00e9t\u00e9 retir\u00e9e, et \u00e0 la place, un acc\u00e8s direct au pseudo-syst\u00e8me de fichiers \/proc est d\u00e9sormais utilis\u00e9 pour modifier les politiques AppArmor, permettant d'ouvrir des descripteurs de fichiers avant de r\u00e9initialiser les privil\u00e8ges.\n<li class=\"l\"> Ajout de la possibilit\u00e9 de g\u00e9rer des cha\u00eenes compl\u00e8tes de certificats x509 dans le payload CERT.\n<li class=\"l\"> Pour am\u00e9liorer l'isolation des processus, un red\u00e9marrage des processus enfants apr\u00e8s un fork() a \u00e9t\u00e9 assur\u00e9.\n<li class=\"l\"> Pour OpenBSD 7.4, l'API interne ibuf a \u00e9t\u00e9 retravaill\u00e9e.\n<li class=\"l\"> La couche de compatibilit\u00e9 a \u00e9t\u00e9 synchronis\u00e9e avec la derni\u00e8re base de code d'OpenBSD.\n<li class=\"l\"> Pour s'assurer que les certificats expir\u00e9s sont mis \u00e0 jour, des corrections ont \u00e9t\u00e9 apport\u00e9es \u00e0 la configuration OpenSSL utilis\u00e9e dans ikectl.      <\/ul>\n<p>Source : <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60146\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenIKED 7.3, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e, \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b IKEv2 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0438 \u0441\u043e\u0431\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438\u043c\u0443\u044e \u0447\u0430\u0441\u0442\u044c IPsec-\u0441\u0442\u0435\u043a\u0430 OpenBSD, \u043d\u043e \u0437\u0430\u0442\u0435\u043c \u0431\u044b\u043b\u0438 \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u044b \u0432 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445. \u0420\u0430\u0431\u043e\u0442\u0430 OpenIKED \u043f\u0440\u043e\u0432\u0435\u0440\u0435\u043d\u0430 \u0432\u043e FreeBSD, NetBSD, macOS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430\u0445 Linux, \u0432\u043a\u043b\u044e\u0447\u0430\u044f Arch, Debian, Fedora \u0438 Ubuntu. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111628","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenIKED 7.3, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenIKED 7.3, \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2 \u0434\u043b\u044f IPsec | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenIKED 7.3, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-11-20T07:10:15+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-11-20T07:10:15+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Version 7.3 d'OpenIKED, une impl\u00e9mentation portable du protocole IKEv2 pour IPsec | ProHoster","description":"Le projet OpenBSD a publi\u00e9 la version 7.3 d'OpenIKED, qui d\u00e9veloppe l'impl\u00e9mentation du protocole IKEv2.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a OpenIKED 7.3, \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2 \u0434\u043b\u044f IPsec | ProHoster","og:description":"\u041f\u0440\u043e\u0435\u043a\u0442 OpenBSD \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenIKED 7.3, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IKEv2.","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-openiked-7-3-perenosimoj-realizaczii-protokola-ikev2-dlya-ipsec","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-20T07:10:15+00:00","article:modified_time":"2023-11-20T07:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"111628","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-04 14:42:25","updated":"2026-02-09 16:51:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/111628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=111628"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/111628\/revisions"}],"predecessor-version":[{"id":158902,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/111628\/revisions\/158902"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=111628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=111628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=111628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}