Contributed by rueda on from the IPSEC facto dept.
The OpenBSD project has announced the release of OpenIKED 7.4:
We have released OpenIKED 7.4, which will be arriving in the OpenIKED directory of your local OpenBSD mirror soon. This release includes the following changes to the previous release: * Fixed a double free bug in ECDH * Added a natt config option that forces negotiation of nat-t (and udpencap) for a policy * Made config file verification not require root permissions * Fixed a bug where iked was retransmitting fragments too eagerly * Tightened apparmor sandboxing on Linux * Various other bug fixes, compatibility fixes and documentation improvements
OpenIKED is known to compile and run on OpenBSD, FreeBSD, NetBSD, macOS and the Linux distributions Arch, Debian, Fedora and Ubuntu. It is our hope that packagers take interest and help adapt OpenIKED to more distributions. OpenIKED can be downloaded from any of the mirrors listed at https://www.openbsd.org/ftp.html, from the /pub/OpenBSD/OpenIKED directory. General bugs may be reported to bugs@openbsd.org. Portable bugs may be filed at https://github.com/openiked/openiked-portable. We welcome feedback and improvements from the broader community. Thanks to all of the contributors who helped make this release possible.
This, with improved tooling for your VPN needs, is another bit of the upcoming release shaping up. Enjoy!