Add some 5.0.3 NEWS
This commit is contained in:
parent
d29246cabe
commit
96776d6f77
22
NEWS
22
NEWS
|
@ -14,6 +14,28 @@ strongswan-5.0.3
|
||||||
- The openssl plugin now uses the AES-NI accelerated version of AES-GCM
|
- The openssl plugin now uses the AES-NI accelerated version of AES-GCM
|
||||||
if the hardware supports it.
|
if the hardware supports it.
|
||||||
|
|
||||||
|
- The eap-radius plugin can now assign virtual IPs to IKE clients using the
|
||||||
|
Framed-IP-Address attribute by using the "%radius" named pool in the
|
||||||
|
rightsourceip ipsec.conf option. Cisco Banner attributes are forwarded to
|
||||||
|
Unity-capable IKEv1 clients during mode config. charon now sends Interim
|
||||||
|
Accounting updates if requested by the RADIUS server, reports
|
||||||
|
sent/received packets in Accounting messages, and adds a Terminate-Cause
|
||||||
|
to Accounting-Stops.
|
||||||
|
|
||||||
|
- The recently introduced "ipsec listcounters" command can report connection
|
||||||
|
specific counters by passing a connection name, and global or connection
|
||||||
|
counters can be reset by the "ipsec resetcounters" command.
|
||||||
|
|
||||||
|
- The strongSwan libpttls library provides an experimental implementation of
|
||||||
|
PT-TLS (RFC 6876), a Posture Transport Protocol over TLS.
|
||||||
|
|
||||||
|
- The charon systime-fix plugin can disable certificate lifetime checks on
|
||||||
|
embedded systems if the system time is obviously out of sync after bootup.
|
||||||
|
Certificates lifetimes get checked once the system time gets sane, closing
|
||||||
|
or reauthenticating connections using expired certificates.
|
||||||
|
|
||||||
|
- The "ikedscp" ipsec.conf option can set DiffServ code points on outgoing
|
||||||
|
IKE packets.
|
||||||
|
|
||||||
strongswan-5.0.2
|
strongswan-5.0.2
|
||||||
----------------
|
----------------
|
||||||
|
|
Loading…
Reference in New Issue