2025.1 Series Release Notes

26.0.0-4

Bug Fixes

• Fixed a race in the IPsec device driver where a VPN service (and its IPsec site connections) could remain stuck in the PENDING_CREATE status. The server only transitions a resource out of a PENDING_* status when the agent reports it with updated_pending_status set to True. That flag is reset after every status report, including the periodic one, so a periodic report firing right after the pending transition was computed could drop the flag and leave the resource pending indefinitely. The driver now always forces the pending status update on the first report of a process.

26.0.0

Prelude

Support for AES CCM and GCM modes, AES-XCBC, AES-CMAC, and more DH groups

New Features

• Added support for more encryption algorithms (AES CCM and AES GCM modes), authentication algorithms (AES-XCBC, AES-CMAC) and PFS choices (Diffie Hellman groups 15 to 31).