OpenBSD Project yalengeza kutulutsidwa kwa OpenIKED 7.2, kukhazikitsidwa kwa protocol ya IKEv2 yopangidwa ndi OpenBSD Project. Uku ndi kutulutsidwa kwachinayi kwa OpenIKED ngati pulojekiti yosiyana - zigawo za IKEv2 poyambilira zinali gawo lofunikira la OpenBSD IPsec stack, koma zidapatulidwa kukhala phukusi losasunthika ndipo tsopano zitha kugwiritsidwa ntchito pamakina ena opangira. OpenIKED yayesedwa pa FreeBSD, NetBSD, macOS ndi magawo osiyanasiyana a Linux kuphatikiza Arch, Debian, Fedora ndi Ubuntu. Khodiyo imalembedwa mu C ndipo imagawidwa pansi pa layisensi ya ISC.
OpenIKED imakupatsani mwayi wotumiza maukonde achinsinsi a IPsec. The IPsec stack ili ndi ma protocol awiri akuluakulu: Key Exchange Protocol (IKE) ndi Encrypted Transport Protocol (ESP). OpenIKED imagwiritsa ntchito zinthu zotsimikizira, masinthidwe, kusinthana kwachinsinsi, ndi kukonza mfundo zachitetezo, ndipo protocol yobisa kuchuluka kwa magalimoto a ESP nthawi zambiri imaperekedwa ndi makina ogwiritsira ntchito. Njira zotsimikizira mu OpenIKED zitha kugwiritsa ntchito makiyi omwe adagawana kale, EAP MSCHAPv2 yokhala ndi satifiketi ya X.509, ndi makiyi onse a RSA ndi ECDSA.
Mu mtundu watsopano:
- Zowerengera zowonjezeredwa ndi ziwerengero za njira yakumbuyo ya iked, yomwe imatha kuwonedwa pogwiritsa ntchito lamulo la 'ikectl show stats'.
- Kutha kutumiza maunyolo a satifiketi kuzinthu zambiri zolipira za CERT kwaperekedwa.
- Kuti zigwirizane ndi mitundu yakale, malipiro omwe ali ndi ID ya ogulitsa awonjezedwa.
- Kusaka bwino kwa malamulo poganizira za srcnat katundu.
- Ntchito ndi NAT-T ku Linux yakhazikitsidwa.
Source: opennet.ru