summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorRene Mayrhofer <rene@mayrhofer.eu.org>2009-02-28 22:02:31 +0000
committerRene Mayrhofer <rene@mayrhofer.eu.org>2009-02-28 22:02:31 +0000
commit19364e11c66714324bd3d5d0dc9212db397085cb (patch)
treefe7f5e55f0474dad1d0c29ba7c0a6f4546c99c3a /NEWS
parentc7f1b0530b85bc7654e68992f25ed8ced5d0a80d (diff)
downloadvyos-strongswan-19364e11c66714324bd3d5d0dc9212db397085cb.tar.gz
vyos-strongswan-19364e11c66714324bd3d5d0dc9212db397085cb.zip
[svn-upgrade] Integrating new upstream version, strongswan (4.2.12)
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS49
1 files changed, 49 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index d2d1b325e..73bec5e27 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,52 @@
+strongswan-4.2.12
+'----------------
+
+- Support of the EAP-MSCHAPv2 protocol enabled by the option
+ --enable-eap-mschapv2. Requires the MD4 hash algorithm enabled
+ either by --enable-md4 or --enable-openssl.
+
+- Assignment of up to two DNS and up to two WINS servers to peers via
+ the IKEv2 Configuration Payload (CP). The IPv4 or IPv6 nameserver
+ addresses are defined in strongswan.conf.
+
+- The strongSwan applet for the Gnome NetworkManager is now built and
+ distributed as a separate tarball under the name NetworkManager-strongswan.
+
+
+strongswan-4.2.11
+-----------------
+
+- Fixed ESP NULL encryption broken by the refactoring of keymat.c.
+ Also introduced proper initialization and disposal of keying material.
+
+- Fixed the missing listing of connection definitions in ipsec statusall
+ broken by an unfortunate local variable overload.
+
+
+strongswan-4.2.10
+-----------------
+
+- Several performance improvements to handle thousands of tunnels with almost
+ linear upscaling. All relevant data structures have been replaced by faster
+ counterparts with better lookup times.
+
+- Better parallelization to run charon on multiple cores. Due to improved
+ ressource locking and other optimizations the daemon can take full
+ advantage of 16 or even more cores.
+
+- The load-tester plugin can use a NULL Diffie-Hellman group and simulate
+ unique identities and certificates by signing peer certificates using a CA
+ on the fly.
+
+- The redesigned stroke in-memory IP pool handles leases. The "ipsec leases"
+ command queries assigned leases.
+
+- Added support for smartcards in charon by using the ENGINE API provided by
+ OpenSSL, based on patches by Michael Roßberg.
+
+- The Padlock plugin supports the hardware RNG found on VIA CPUs to provide a
+ reliable source of randomness.
+
strongswan-4.2.9
----------------