Kutulutsidwa kwa OpenIKED 7.1, kukhazikitsidwa kwa protocol ya IKEv2 yopangidwa ndi pulojekiti ya OpenBSD, kwasindikizidwa. Zida za IKEv2 poyambilira zinali gawo lofunikira la OpenBSD IPsec stack, koma tsopano zapatulidwa kukhala phukusi losunthika ndipo zitha kugwiritsidwa ntchito pamakina ena opangira. Mwachitsanzo, OpenIKED yayesedwa pa FreeBSD, NetBSD, macOS, ndi magawo osiyanasiyana a Linux, kuphatikizapo Arch, Debian, Fedora, ndi Ubuntu. Khodiyo imalembedwa mu C ndipo imagawidwa pansi pa layisensi ya ISC.
OpenIKED imakupatsani mwayi wotumiza maukonde achinsinsi a IPsec. The IPsec stack ili ndi ma protocol awiri akuluakulu: Key Exchange Protocol (IKE) ndi Encrypted Transport Protocol (ESP). OpenIKED imagwiritsa ntchito zinthu zotsimikizira, masinthidwe, kusinthana kwachinsinsi, ndi kukonza mfundo zachitetezo, ndipo protocol yobisa kuchuluka kwa magalimoto a ESP nthawi zambiri imaperekedwa ndi makina ogwiritsira ntchito. Njira zotsimikizira mu OpenIKED zitha kugwiritsa ntchito makiyi omwe adagawana kale, EAP MSCHAPv2 yokhala ndi satifiketi ya X.509, ndi makiyi onse a RSA ndi ECDSA.
Mtundu watsopanowu umawonjezera lamulo la 'ikectl show certinfo' kuti muwonetse ziphaso zotsitsidwa ndi maulamuliro a certification, kumathandizira kugawika kwa uthenga wa IKEv2, kumakulitsa luso la kasinthidwe ka ulusi, kumawonjezera kuthandizira kudzipatula kwapambuyo pogwiritsa ntchito makina a AppArmor ku Linux, kumawonjezera mayeso atsopano kuti azindikire kuyambiranso. kusintha pamapulatifomu osiyanasiyana.
Source: opennet.ru