NEWS: Updates for the ah, libipsec-usestats and printf-hook merges
This commit is contained in:
parent
5900d6d469
commit
390d2b50b3
13
NEWS
13
NEWS
|
@ -17,14 +17,27 @@ strongswan-5.1.1
|
||||||
modeconfig=push option enables it for both client and server, the same way
|
modeconfig=push option enables it for both client and server, the same way
|
||||||
as pluto used it.
|
as pluto used it.
|
||||||
|
|
||||||
|
- Using the "ah" ipsec.conf keyword on both IKEv1 and IKEv2 connections,
|
||||||
|
charon can negotiate and install Security Associations integrity-protected by
|
||||||
|
the Authentication Header protocol. Supported are plain AH(+IPComp) SAs only,
|
||||||
|
but not the deprecated RFC2401 style ESP+AH bundles.
|
||||||
|
|
||||||
- The left and right options in ipsec.conf can take multiple address ranges
|
- The left and right options in ipsec.conf can take multiple address ranges
|
||||||
and subnets. This allows connection matching against a larger set of
|
and subnets. This allows connection matching against a larger set of
|
||||||
addresses, for example to use a different connection for clients connecting
|
addresses, for example to use a different connection for clients connecting
|
||||||
from a internal network.
|
from a internal network.
|
||||||
|
|
||||||
|
- The kernel-libipsec userland IPsec backend now supports usage statistics,
|
||||||
|
volume based rekeying and accepts ESPv3 style TFC padded packets.
|
||||||
|
|
||||||
- load-tester supports transport mode connections and more complex traffic
|
- load-tester supports transport mode connections and more complex traffic
|
||||||
selectors, including such using unique ports for each tunnel.
|
selectors, including such using unique ports for each tunnel.
|
||||||
|
|
||||||
|
- libstrongswan now can provide an experimental custom implementation of the
|
||||||
|
printf family functions based on klibc if neither Vstr nor glibc style printf
|
||||||
|
hooks are available. This can avoid the Vstr dependency on some systems at
|
||||||
|
the cost of slower and less complete printf functions.
|
||||||
|
|
||||||
|
|
||||||
strongswan-5.1.0
|
strongswan-5.1.0
|
||||||
----------------
|
----------------
|
||||||
|
|
Loading…
Reference in New Issue