Component: ike2
265 changelog entries across 111 version(s)
Releases by channel (stacked)
- fixed child SA cleanup during flush operation;
- fixed pending responder connection cleanup after peer removal;
- fixed SA delete handling on initiator during rekey;
- improved HMAC size validation checks;
- fixed child SA cleanup during flush operation;
- fixed pending responder connection cleanup after peer removal;
- fixed SA delete handling on initiator during rekey;
- improved HMAC size validation checks;
- adapt rekey procedure for compatibility with Libreswan;
- fixed incorrect key length used for CHILD SA keys (introduced in v7.21beta2);
- adapt rekey procedure for compatibility with Libreswan;
- improved system stability;
- improved system stability;
- improved initial key exchange process on slow or unreliable connections;
- improved initial key exchange process on slow or unreliable connections;
- improved performance by balancing multicore CPU usage for key exchange calculation also for initiator;
- improved performance by balancing multicore CPU usage for key exchange calculation also for initiator;
- improved performance by balancing multicore CPU usage for key exchange calculation;
- fixed ike2 double reply;
- fixed ike2 double reply;
- improved rekey collision handling;
- improved rekey collision handling;
- improved SA rekeying reply process;
- improved system stability when closing phase1;
- improved system stability when making configuration changes on active setup;
- log "reply ignored" as non-debug log message;
- fixed ECP521 DH group usage (introduced in v7.11 beta1);
- improved SA rekeying reply process;
- log "reply ignored" as non-debug log message;
- improved system stability when closing phase1;
- improved system stability when making configuration changes on active setup;
- improved child SA delete request processing;
- fixed authentication process using EC digital signature (introduced in v7.10rc3);
- improved child SA delete request processing;