diff options
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 49 |
1 files changed, 49 insertions, 0 deletions
@@ -1,3 +1,52 @@ +strongswan-4.2.12 +'---------------- + +- Support of the EAP-MSCHAPv2 protocol enabled by the option + --enable-eap-mschapv2. Requires the MD4 hash algorithm enabled + either by --enable-md4 or --enable-openssl. + +- Assignment of up to two DNS and up to two WINS servers to peers via + the IKEv2 Configuration Payload (CP). The IPv4 or IPv6 nameserver + addresses are defined in strongswan.conf. + +- The strongSwan applet for the Gnome NetworkManager is now built and + distributed as a separate tarball under the name NetworkManager-strongswan. + + +strongswan-4.2.11 +----------------- + +- Fixed ESP NULL encryption broken by the refactoring of keymat.c. + Also introduced proper initialization and disposal of keying material. + +- Fixed the missing listing of connection definitions in ipsec statusall + broken by an unfortunate local variable overload. + + +strongswan-4.2.10 +----------------- + +- Several performance improvements to handle thousands of tunnels with almost + linear upscaling. All relevant data structures have been replaced by faster + counterparts with better lookup times. + +- Better parallelization to run charon on multiple cores. Due to improved + ressource locking and other optimizations the daemon can take full + advantage of 16 or even more cores. + +- The load-tester plugin can use a NULL Diffie-Hellman group and simulate + unique identities and certificates by signing peer certificates using a CA + on the fly. + +- The redesigned stroke in-memory IP pool handles leases. The "ipsec leases" + command queries assigned leases. + +- Added support for smartcards in charon by using the ENGINE API provided by + OpenSSL, based on patches by Michael Roßberg. + +- The Padlock plugin supports the hardware RNG found on VIA CPUs to provide a + reliable source of randomness. + strongswan-4.2.9 ---------------- |