Component: ipsec

7.12 Stable 2023-Nov-09 (2 years ago)

• fixed Diffie-Hellman public value encoding size;
• fixed IPSec policy when using modp3072;
• fixed minor typo in logs;
• reduce disk writes when started without active configuration;

7.12beta7 Testing 2023-Sep-13 (3 years ago)

• fixed Diffie-Hellman public value encoding size;
• fixed minor typo in logs;
• reduce disk writes when started without active configuration;

7.11.1 Stable 2023-Aug-30 (3 years ago)

• fixed IPSec policy when using modp3072;

7.12beta3 Testing 2023-Aug-24 (3 years ago)

• fixed IPSec policy when using modp3072;

7.11 Stable 2023-Aug-15 (3 years ago)

• fixed public key export (introduced in v7.10);
• fixed signature authentication using secp521r1 certificate (introduced in v7.10);
• improved IKE2 rekey process;
• properly check ph2 approval validity when using IKE1 exchange mode;

7.11rc3 Testing 2023-Aug-09 (3 years ago)

• fixed public key export (introduced in v7.10);
• fixed signature authentication using secp521r1 certificate (introduced in v7.10);

7.11beta4 Testing 2023-Jul-05 (3 years ago)

• improved IKE2 rekey process;
• properly check ph2 approval validity when using IKE1 exchange mode;

7.10 Stable 2023-Jun-15 (3 years ago)

• added hardware acceleration support for IPQ-5010 (hAP ax lite);
• refactor public key authentication;
• removed "ec2n185" and "ec2n155" values from proposal configurations;

7.10beta8 Testing 2023-May-22 (3 years ago)

• added hardware acceleration support for IPQ-5010 (hAP ax lite);
• removed "ec2n185" and "ec2n155" values from proposal configurations;

7.10beta5 Testing 2023-May-09 (3 years ago)

• added hardware acceleration support for IPQ-5010 (hAP ax lite);
• refactor public key authentication;

7.9 Stable 2023-May-02 (3 years ago)

• added error log message when peer ID does not match certificate;
• fixed packet processing by hardware encryption engine on RB850Gx2 device;
• refactor X.509 implementation;

7.9rc1 Testing 2023-Mar-30 (3 years ago)

• added error log message when peer ID does not match certificate;
• improved handling of configuration that refers to non-existent certificate (introduced in v7.9beta4);

7.9beta4 Testing 2023-Mar-23 (3 years ago)

• fixed packet processing by hardware encryption engine on RB850Gx2 device;
• refactor X.509 implementation;

7.8 Stable 2023-Feb-24 (3 years ago)

• added support for "Framed-Route" RADIUS attribute support;
• do not match incoming IKE requests by unresolved DNS name peers;
• fixed peer matcher for incoming connection with unresolved DNS;

7.8beta3 Testing 2023-Feb-01 (3 years ago)

• fixed peer matcher for incoming connection with unresolved DNS;

7.8beta2 Testing 2023-Jan-20 (3 years ago)

• added support for "Framed-Route" RADIUS attribute support;
• do not match incoming IKE requests by unresolved DNS name peers;

7.7 Stable 2023-Jan-12 (3 years ago)

• added "current-address" parameter for peers with DNS address;
• added hardware acceleration support for IPQ-6010;
• added support for AVX optimized SHA acceleration;
• improved "H" (hw-aead) flag presence for accelerated SA's;
• improved IKE payload processing;
• improved configuration of IPsec proposal auth-algorithms;
• removed Blowfish and Camellia encryption algorithms for IKE;

7.7rc2 Testing 2022-Dec-16 (3 years ago)

• improved IKE payload processing;

7.7rc1 Testing 2022-Dec-08 (3 years ago)

• added "current-address" parameter for peers with DNS address;

7.7beta8 Testing 2022-Nov-23 (3 years ago)

• added support for AVX optimized SHA acceleration;
• improved "H" (hw-aead) flag presence for accelerated SA's;
• improved configuration of IPsec proposal auth-algorithms;
• improved IKE payload processing;

7.7beta6 Testing 2022-Nov-04 (3 years ago)

• added hardware acceleration support for IPQ-6010;

7.7beta3 Testing 2022-Oct-26 (4 years ago)

• removed Blowfish and Camellia encryption algorithms for IKE;

7.6 Stable 2022-Oct-17 (4 years ago)

• added "invalid-packets" counter for Installed SA's menu;
• fixed packet processing by hardware encryption engine on MMIPS devices;

7.6beta10 Testing 2022-Sep-29 (4 years ago)

• added "invalid-packets" counter for Installed SA's menu;
• fixed packet processing by hardware encryption engine on MMIPS devices;

7.3 Stable 2022-Jun-06 (4 years ago)

• fixed IPsec IRQ initialization on startup on TILE;
• fixed printing of active peer statistics;