diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2007-04-06 09:51:04 +0000 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2007-04-06 09:51:04 +0000 |
| commit | db88e37d2fa427d6c86ef47814b18ccefb524f5f (patch) | |
| tree | 569b93d6bbd1d8b5755ab9aa2cc5c5550142d958 | |
| parent | 2c0e0f4f62750b52ecb304c96d992dbddc09b259 (diff) | |
| download | strongswan-db88e37d2fa427d6c86ef47814b18ccefb524f5f.tar.bz2 strongswan-db88e37d2fa427d6c86ef47814b18ccefb524f5f.tar.xz | |
ldap-based crl fetching supported
| -rw-r--r-- | NEWS | 8 |
1 files changed, 4 insertions, 4 deletions
@@ -8,6 +8,10 @@ strongswan-4.1.1 compared to properly detect retransmissions and incoming retransmits are detected even if the IKE_SA is blocked (e.g. doing OCSP fetches). +- The IKEv2 daemon charon now supports dynamic http- and ldap-based CRL + fetching enabled by crlcheckinterval > 0 and caching fetched CRLs + enabled by cachecrls=yes. + - Added the configuration options --enable-nat-transport which enables the potentially insecure NAT traversal for IPsec transport mode and --disable-vendor-id which disables the sending of the strongSwan @@ -21,10 +25,6 @@ strongswan-4.1.1 - Added the NATT_IETF_02_N Vendor ID in order to support IKEv1 connections with Windows 2003 Server which uses a wrong VID hash. -- The IKEv2 daemon charon now supports dynamic http-based CRL fetching - enabled by crlcheckinterval > 0 and caching fetched CRLs enabled by - cachecrls=yes. - strongswan-4.1.0 ---------------- |