1

Is there any official documentation on what IPSec key exchange types are supported by the native Android 12 IPSec client (Racoon)? Specifically I’m interested in whether IKEv1 still works.

I’m asking this because I’m thrown off by a paragraph on the OpenWRT wiki which seems to indicate that as of v12, only IKEv2 modes are supported, killing off ISAKMP which has worked until v11. After spending some time searching for an official announcement or even just a feature list I came up empty handed.

The screenshot on this Github issue: https://github.com/SoftEtherVPN/SoftEtherVPN/issues/1373 appears to confirm the removal of IKEv1 in v12.

2
  • 1
    This was mentioned in passing on the official Android Developer - IPsec/IKEv2 Library: "The module also enables deprecation and replacement of the racoon-based IKEv1 VPN library used as the default built-in VPN client in Android 10 and lower." (emphasis added), though looks like it's started to be enforced since Android 12 Beta 2 (ref: Reddit, GitHub - SoftEtherVPN).
    – Andrew T.
    May 4 at 11:19
  • @AndrewT.: Yes I’m aware of that document but seeing that Android 11 still had support for IKEv1 I’m uncertain whether Google has already advanced past the deprecation phase into replacement of Racoon.
    – phg
    May 4 at 11:22

1 Answer 1

1

The answer is no.

This commit added an exception that is thrown when the user tries to initiate an IKEv1 connection. The bug with the id given in the commit message is non-public so presumably this change was motivated not by technical but policy considerations.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .