NEWS: Introduce EAP constraints support for EAP-(T)TLS

This commit is contained in:
Martin Willi 2015-01-29 11:57:44 +01:00
parent f2e2cce2aa
commit f05a578b8b
1 changed files with 5 additions and 0 deletions

5
NEWS
View File

@ -22,6 +22,11 @@ strongswan-5.3.0
Windows 7 IKEv2 clients, which announces its services over the tunnel if the
negotiated IPsec policy allows it.
- EAP server methods now can fulfill public key constraints, such as rightcert
or rightca. Additionally, public key and signature constraints can be
specified for EAP methods in the rightauth keyword. Currently the EAP-TLS and
EAP-TTLS methods provide verification details to constraints checking.
- Upgrade of the BLISS post-quantum signature algorithm to the improved BLISS-B
variant. Can be used in conjunction with the SHA256, SHA384 and SHA512 hash
algorithms with SHA512 being the default.