Improving and Stabilizing the Racoon2 IKE Daemon in NetBSD
3 days ago
- Implemented RFC 7383 IKE fragmentation for reliable handling of large messages in both IKEv1 and IKEv2.
- Fixed NAT-OA payloads in IKEv1 Quick Mode per RFC 3947, enabling incremental checksum fixup in the kernel.
- Integrated NAT-T address substitution per RFC 7296, eliminating the need for workaround selectors.
- Unified address macros into a consistent wildcard, resolving configuration bugs and improving diagnostics.
- Enabled IPv6 support by default and fixed address matching and prefix-length handling.
- Created a unit test framework with four test programs, integrated into the build and running under sanitizers.
- Updated documentation, samples, and NEWS to reflect new defaults and changes.