Component: ipsec,ike2

7.24 Stable 2026-Aug-14 (1 month ago)

• fixed ppk child key generation during rekey;
• improved KE generation validation during initial setup and child SA creation;
• improved PPK handling by always using it when authorized, including additional Child SAs, and moved PPK processing to the Child SA task;
• use first child KE selection only during IKE_AUTH exchange;

7.24rc4 Testing 2026-Aug-11 (1 month ago)

• fixed ppk child key generation during rekey;
• use first child KE selection only during IKE_AUTH exchange;

7.23.3 Stable 2026-Jul-30 (1 month ago)

• improved logging when remote ID is specified;
• use peer certificates also when identity has one set for peer matching;

7.24rc2 Testing 2026-Jul-10 (2 months ago)

• use peer certificates also when identity has one set for peer matching;

7.23.2 Stable 2026-Jul-03 (2 months ago)

• fixed active connection termination;
• fixed SA payload validation;
• improved pending child SA cleanup and removal of dangling SAs during Phase 2 deletion;

7.24beta3 Development 2026-Jun-19 (3 months ago)

• improved PPK handling by always using it when authorized, including additional Child SAs, and moved PPK processing to the Child SA task;

7.24beta2 Development 2026-Jun-10 (3 months ago)

• fixed active connection termination;
• fixed SA payload validation;
• improved pending child SA cleanup and removal of dangling SAs during Phase 2 deletion;

7.23.1 Stable 2026-Jun-02 (3 months ago)

• improved TSi validation to prevent modecfg address conflicts;

7.24beta1 Development 2026-May-26 (3 months ago)

• improved KE generation validation during initial setup and child SA creation;
• improved logging when remote ID is specified;
• improved TSi validation to prevent modecfg address conflicts;