NEWS cosmetics
This commit is contained in:
parent
e87b78c6ad
commit
b59340a2c3
9
NEWS
9
NEWS
|
@ -6,12 +6,13 @@ strongswan-4.4.1
|
|||
ikev2/nat-two-rw-mark, ikev2/rw-nat-mark-in-out and ikev2/net2net-psk-dscp.
|
||||
|
||||
- The PLUTO_MARK_IN and PLUTO_ESP_ENC environment variables can be used
|
||||
in the updown scripts to set marks on inbound ESP or ESP_IN_UDP packets.
|
||||
in a user-specific updown script to set marks on inbound ESP or
|
||||
ESP_IN_UDP packets.
|
||||
|
||||
- The openssl plugin now supports X.509 certificate and CRL functions.
|
||||
|
||||
- OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled
|
||||
by default. Update manual load directives in strongswan.conf.
|
||||
by default. Plase update manual load directives in strongswan.conf.
|
||||
|
||||
- RFC3779 ipAddrBlock constraint checking has been moved to the addrblock
|
||||
plugin, disabled by default. Enable it and update manual load directives
|
||||
|
@ -26,8 +27,8 @@ strongswan-4.4.1
|
|||
the transport and handling of any Mode Config attribute.
|
||||
|
||||
- The RADIUS proxy plugin eap-radius now supports multiple servers. Configured
|
||||
servers are chosen randomly, with the option to prefer a servers. Not
|
||||
responding servers are degraded in the selection process.
|
||||
servers are chosen randomly, with the option to prefer a specific server.
|
||||
Non-responding servers are degraded by the selection process.
|
||||
|
||||
- The ipsec pool tool manages arbitrary configuration attributes stored
|
||||
in an SQL database. ipsec pool --help gives the details.
|
||||
|
|
Loading…
Reference in New Issue