From 19364e11c66714324bd3d5d0dc9212db397085cb Mon Sep 17 00:00:00 2001 From: Rene Mayrhofer Date: Sat, 28 Feb 2009 22:02:31 +0000 Subject: [svn-upgrade] Integrating new upstream version, strongswan (4.2.12) --- NEWS | 49 +++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 49 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index d2d1b325e..73bec5e27 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,52 @@ +strongswan-4.2.12 +'---------------- + +- Support of the EAP-MSCHAPv2 protocol enabled by the option + --enable-eap-mschapv2. Requires the MD4 hash algorithm enabled + either by --enable-md4 or --enable-openssl. + +- Assignment of up to two DNS and up to two WINS servers to peers via + the IKEv2 Configuration Payload (CP). The IPv4 or IPv6 nameserver + addresses are defined in strongswan.conf. + +- The strongSwan applet for the Gnome NetworkManager is now built and + distributed as a separate tarball under the name NetworkManager-strongswan. + + +strongswan-4.2.11 +----------------- + +- Fixed ESP NULL encryption broken by the refactoring of keymat.c. + Also introduced proper initialization and disposal of keying material. + +- Fixed the missing listing of connection definitions in ipsec statusall + broken by an unfortunate local variable overload. + + +strongswan-4.2.10 +----------------- + +- Several performance improvements to handle thousands of tunnels with almost + linear upscaling. All relevant data structures have been replaced by faster + counterparts with better lookup times. + +- Better parallelization to run charon on multiple cores. Due to improved + ressource locking and other optimizations the daemon can take full + advantage of 16 or even more cores. + +- The load-tester plugin can use a NULL Diffie-Hellman group and simulate + unique identities and certificates by signing peer certificates using a CA + on the fly. + +- The redesigned stroke in-memory IP pool handles leases. The "ipsec leases" + command queries assigned leases. + +- Added support for smartcards in charon by using the ENGINE API provided by + OpenSSL, based on patches by Michael Roßberg. + +- The Padlock plugin supports the hardware RNG found on VIA CPUs to provide a + reliable source of randomness. + strongswan-4.2.9 ---------------- -- cgit v1.2.3