diff options
| author | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2009-02-28 22:02:31 +0000 |
|---|---|---|
| committer | Rene Mayrhofer <rene@mayrhofer.eu.org> | 2009-02-28 22:02:31 +0000 |
| commit | 19364e11c66714324bd3d5d0dc9212db397085cb (patch) | |
| tree | fe7f5e55f0474dad1d0c29ba7c0a6f4546c99c3a /NEWS | |
| parent | c7f1b0530b85bc7654e68992f25ed8ced5d0a80d (diff) | |
| download | vyos-strongswan-19364e11c66714324bd3d5d0dc9212db397085cb.tar.gz vyos-strongswan-19364e11c66714324bd3d5d0dc9212db397085cb.zip | |
[svn-upgrade] Integrating new upstream version, strongswan (4.2.12)
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 49 |
1 files changed, 49 insertions, 0 deletions
@@ -1,3 +1,52 @@ +strongswan-4.2.12 +'---------------- + +- Support of the EAP-MSCHAPv2 protocol enabled by the option + --enable-eap-mschapv2. Requires the MD4 hash algorithm enabled + either by --enable-md4 or --enable-openssl. + +- Assignment of up to two DNS and up to two WINS servers to peers via + the IKEv2 Configuration Payload (CP). The IPv4 or IPv6 nameserver + addresses are defined in strongswan.conf. + +- The strongSwan applet for the Gnome NetworkManager is now built and + distributed as a separate tarball under the name NetworkManager-strongswan. + + +strongswan-4.2.11 +----------------- + +- Fixed ESP NULL encryption broken by the refactoring of keymat.c. + Also introduced proper initialization and disposal of keying material. + +- Fixed the missing listing of connection definitions in ipsec statusall + broken by an unfortunate local variable overload. + + +strongswan-4.2.10 +----------------- + +- Several performance improvements to handle thousands of tunnels with almost + linear upscaling. All relevant data structures have been replaced by faster + counterparts with better lookup times. + +- Better parallelization to run charon on multiple cores. Due to improved + ressource locking and other optimizations the daemon can take full + advantage of 16 or even more cores. + +- The load-tester plugin can use a NULL Diffie-Hellman group and simulate + unique identities and certificates by signing peer certificates using a CA + on the fly. + +- The redesigned stroke in-memory IP pool handles leases. The "ipsec leases" + command queries assigned leases. + +- Added support for smartcards in charon by using the ENGINE API provided by + OpenSSL, based on patches by Michael Roßberg. + +- The Padlock plugin supports the hardware RNG found on VIA CPUs to provide a + reliable source of randomness. + strongswan-4.2.9 ---------------- |