OpenBSD Journal

OpenIKED 7.3 released

Contributed by rueda on from the Ike, IPSec my keys dept.

Tobias Heider (tobhe@) has announced the release of version 7.3 of OpenIKED:

We have released OpenIKED 7.3, which will be arriving in the OpenIKED
directory of your local OpenBSD mirror soon.
This release includes the following changes to the previous release:

    * Reexecute child processes after forking for better process

    * Support for new route-based sec(4) tunnels on OpenBSD

    * Handle full x509 chains in CERT payloads
    * Support multiple name servers per interface on Linux.

    * Refactored internal ibuf API for OpenBSD 7.4

    * Optionally use libssytemd to configure DNS via DBUS instead of
      calling resolvectl cli tool on Linux

    * Dropped libapparmor dependency on Linux in favor of directly
      using the /proc interface. This allows us to open file descriptors
      before dropping privileges and change policy afterwards allowing
      for even stricter apparmor confinement.

    * Fixed the openssl config used by ikectl to allow renewing expired

    * Sync compatibility layer with OpenBSD

    * Fixed some memory leaks

OpenIKED is known to compile and run on OpenBSD, FreeBSD, NetBSD, macOS
and the Linux distributions Arch, Debian, Fedora and Ubuntu.

It is our hope that packagers take interest and help adapt OpenIKED
to more distributions.

OpenIKED can be downloaded from any of the mirrors listed at, from the /pub/OpenBSD/OpenIKED

General bugs may be reported to Portable bugs
may be filed at

We welcome feedback and improvements from the broader community.
Thanks to all of the contributors who helped make this release

Yet another release of the truly portable IPSec tool for us all to enjoy!

(Comments are closed)


Copyright © - Daniel Hartmeier. All rights reserved. Articles and comments are copyright their respective authors, submission implies license to publish on this web site. Contents of the archive prior to as well as images and HTML templates were copied from the fabulous original with Jose's and Jim's kind permission. This journal runs as CGI with httpd(8) on OpenBSD, the source code is BSD licensed. undeadly \Un*dead"ly\, a. Not subject to death; immortal. [Obs.]