starter bug fix and pkcs11initargs patch by Robert Varga

This commit is contained in:
Andreas Steffen 2007-07-03 12:51:29 +00:00
parent 3bc62fe70e
commit a0a0bdd727
1 changed files with 11 additions and 0 deletions

11
NEWS
View File

@ -35,6 +35,17 @@ strongswan-4.1.4
cannot be resolved by DNS then right=%any will be used so that passive
connections as a responder are still possible.
- The new pkcs11initargs parameter that can be placed in the
setup config section of /etc/ipsec.conf allows the definition
of an argument string that is used with the PKCS#11 C_Initialize()
function. This non-standard feature is required by the NSS softoken
library. This patch was contributed by Robert Varga.
- Fixed a bug in ipsec starter introduced by strongswan-2.8.5
which caused a segmentation fault in the presence of unknown
or misspelt keywords in ipsec.conf. This bug fix was contributed
by Robert Varga.
- Partial support for MOBIKE in IKEv2. The initiator acts on interface/
address configuration changes and updates IKE and IPsec SAs dynamically.