From b22bb9f21c5637ceb2a4d93680d0b08d3b2ed9a0 Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Sat, 17 Jul 2010 17:25:01 +0200 Subject: [PATCH] updated NEWS --- NEWS | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/NEWS b/NEWS index 32b4e501c..08698f828 100644 --- a/NEWS +++ b/NEWS @@ -2,9 +2,12 @@ strongswan-4.4.1 ---------------- - Support of xfrm marks in IPsec SAs and IPsec policies introduced - with the Linux 2.6.34 kernel. For details see example scenarios - ikev2/nat-two-rw-mark and ikev2/net2net-psk-dscp. + with the Linux 2.6.34 kernel. For details see the example scenarios + ikev2/nat-two-rw-mark, ikev2/rw-nat-mark-in-out and ikev2/net2net-psk-dscp. +- The PLUTO_MARK_IN and PLUTO_ESP_ENC environment variables can be used + in the updown scripts to set marks on inbound ESP or ESP_IN_UDP packets. + - The openssl plugin now supports X.509 certificate and CRL functions. - OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled