diff options
| author | Yves-Alexis Perez <corsac@corsac.net> | 2017-12-18 20:39:45 +0100 |
|---|---|---|
| committer | Yves-Alexis Perez <corsac@corsac.net> | 2017-12-18 20:39:45 +0100 |
| commit | 126877ab5a1624870dc4bdc2529bfde611f68eb7 (patch) | |
| tree | a0a47faaee83e5fded94c161b89a9e79433c77fc | |
| parent | bc58fcef7000bf7a564d505877119308d3b7ae64 (diff) | |
| parent | 50347594b2411c23f9314bead2b5cf9ee43cb129 (diff) | |
| download | vyos-strongswan-126877ab5a1624870dc4bdc2529bfde611f68eb7.tar.gz vyos-strongswan-126877ab5a1624870dc4bdc2529bfde611f68eb7.zip | |
Merge remote-tracking branch 'origin/master'
| -rw-r--r-- | debian/NEWS | 22 | ||||
| -rw-r--r-- | debian/changelog | 6 |
2 files changed, 28 insertions, 0 deletions
diff --git a/debian/NEWS b/debian/NEWS index e94bb6284..548d4fd4d 100644 --- a/debian/NEWS +++ b/debian/NEWS @@ -1,3 +1,25 @@ +strongswan (5.6.1-2) UNRELEASED; urgency=medium + + Starting 5.6.1, several algorithms were removed from the default ESP/AH and + IKEv2 proposals in compliance with RFC 8221[1] and RFC 8247[2], + respectively. + . + Removed from the default ESP/AH proposal were the 3DES and Blowfish + encryption algorithms and the HMAC-MD5 integrity algorithm. + . + From the IKEv2 default proposal the HMAC-MD5 integrity algorithm and the + MODP-1024 Diffie-Hellman group were removed (the latter is significant for + Windows clients in their default configuration). + . + These algorithms may still be used in custom proposals and MODP-2048 can be + enabled manually on Windows 7 clients [3]. + . + [1] https://tools.ietf.org/html/rfc8221 + [2] https://tools.ietf.org/html/rfc8247 + [3] https://wiki.strongswan.org/projects/strongswan/wiki/Windows7#AES-256-CBC-and-MODP2048 + + -- Yves-Alexis Perez <corsac@debian.org> Thu, 30 Nov 2017 14:01:24 +0100 + strongswan (5.1.2-1) unstable; urgency=medium Starting 5.1.2, strongSwan natively support a configuration directory (in diff --git a/debian/changelog b/debian/changelog index f752cfc2f..08f4a54c6 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,9 @@ +strongswan (5.6.1-4) UNRELEASED; urgency=medium + + * d/NEWS: add information about disabled algorithms (closes: #883072) + + -- Yves-Alexis Perez <corsac@debian.org> Thu, 30 Nov 2017 14:09:26 +0100 + strongswan (5.6.1-3) unstable; urgency=medium * move updown plugin from -starter to -libcharon. closes: #884578 |