Component: ipsec

7.26beta4 Development 2026-Oct-27 (3 days ago)

• fix XFRM interfaces staying down until a reboot;

7.25 Stable 2026-Oct-22 (1 week ago)

• add XFRM interface support;
• fix IKEv1 tunnels failing to establish when the commit bit is set;
• fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21);
• fix IPsec tunnels failing after migration from the old QKD settings;
• fix policy and SA handling after moving it to netlink;

7.25rc3 Testing 2026-Oct-20 (1 week ago)

• fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21);
• fix policies not being loaded after an upgrade (introduced in v7.25rc2);

7.26beta3 Development 2026-Oct-16 (2 weeks ago)

• fix IKEv2 EAP-TTLS client failing with invalid trust store (introduced in v7.21);
• fix policies not being loaded after an upgrade (introduced in v7.25);

7.25rc2 Testing 2026-Oct-09 (3 weeks ago)

• fix IPsec tunnels failing after migration from the old QKD settings;

7.23.8 Long-term 2026-Oct-08 (3 weeks ago)

• fix IPsec tunnels not establishing when an address my-id is configured on the responder;

7.26beta1 Development 2026-Oct-01 (4 weeks ago)

• fix IPsec tunnels failing after migration from the old QKD settings;
• fix IPsec tunnels not establishing when an address my-id is configured on the responder;

7.24.3 Stable 2026-Sep-14 (1 month ago)

• fix duplicate connections on IKEv2 retransmissions;
• improve stability;

7.23.6 Long-term 2026-Sep-14 (1 month ago)

• fix duplicate connections on IKEv2 retransmissions;
• improve stability;

7.25beta4 Development 2026-Sep-10 (1 month ago)

• fix IKEv1 tunnels failing to establish when the commit bit is set;
• improve stability;
• fix duplicate connections on IKEv2 retransmissions;

7.23.4 Long-term 2026-Sep-03 (1 month ago)

• fixed expired SA handling to prevent "no such item" errors during listing;
• improve IKE handshake stability;

7.25beta3 Development 2026-Sep-02 (1 month ago)

• add XFRM interface support;
• fix policy and SA handling after moving it to netlink;
• improve IKE handshake stability;
• improved service stability when processing an IKEv1 request;

7.24 Stable 2026-Aug-14 (2 months ago)

• fixed expired SA handling to prevent “no such item” errors during listing;

7.24rc4 Testing 2026-Aug-11 (2 months ago)

• fixed expired SA handling to prevent “no such item” errors during listing;

7.23.3 Stable 2026-Jul-30 (3 months ago)

• fixed identity lookup to skip past disabled and certificate-matched identities when scanning for an exact ID match;

7.24rc3 Testing 2026-Jul-28 (3 months ago)

• fixed identity lookup to skip past disabled and certificate-matched identities when scanning for an exact ID match;

7.23.2 Stable 2026-Jul-03 (3 months ago)

• fixed policy move handling;

7.24beta3 Development 2026-Jun-19 (4 months ago)

• fixed policy move handling;

7.23 Stable 2026-May-25 (5 months ago)

• added netlink-based SA and policy handling;
• fixed SA proto parameter conversion and policy "none" type handling;
• improved NAT encapsulation parameter forwarding;

7.22.2 Stable 2026-Apr-22 (6 months ago)

• fixed expired SA handling to prevent “no such item” errors during listing;

7.21.4 Long-term 2026-Apr-21 (6 months ago)

• improved aes256-ctr stability on L009;
• removed modp8192 proposal on MIPS architectures;

7.23rc1 Testing 2026-Apr-14 (6 months ago)

• improved NAT encapsulation parameter forwarding;

7.23beta2 Development 2026-Mar-13 (7 months ago)

• added netlink-based SA and policy handling;
• fixed SA proto parameter conversion and policy "none" type handling;

7.22 Stable 2026-Mar-09 (7 months ago)

• added "none" option to IPsec key QKD certificate field;
• added IKEv2 DDoS cookie activation setting;
• added logging for IPsec policy template group;
• added logging of IKEv2 connection SPI and initiator address;
• adjusted minimum generated PSK key length;
• fixed IKEv2 child policy reqid lost on rekey;
• fixed IKEv2 child reqid handling on traffic selector update;
• improved aes256-ctr stability on L009;
• removed modp8192 proposal on MIPS architectures;

7.22rc3 Testing 2026-Feb-26 (8 months ago)

• improved aes256-ctr stability on L009;