diff options
| author | Martin Willi <martin@strongswan.org> | 2007-04-26 06:33:03 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2007-04-26 06:33:03 +0000 |
| commit | 37fb03554b6b5befddb41280dc361da5dbe142a9 (patch) | |
| tree | f6ddf35577a37d6d7ebe58b6c498e93f029857ec | |
| parent | 8ea7b96f7b8b2e61779b6bf43094189783893625 (diff) | |
| download | strongswan-37fb03554b6b5befddb41280dc361da5dbe142a9.tar.bz2 strongswan-37fb03554b6b5befddb41280dc361da5dbe142a9.tar.xz | |
updated NEWS
| -rw-r--r-- | NEWS | 11 |
1 files changed, 10 insertions, 1 deletions
@@ -1,10 +1,19 @@ strongswan-4.1.2 ---------------- +- Support for an additional diffie hellman exchange when creating/rekeying + a CHILD_SA in IKEv2 (PFS). PFS is enabled when the proposal contains a + DH group (e.g. "esp=aes128-sha1-modp1536"). Further, DH group negotiation + is implemented properly for rekeying. + +- Support for the AES-XCBC-96 MAC algorithm for IPsec SAs when using IKEv2 + (requires linux >= 2.6.20). It is enabled using e.g. "esp=aes256-aesxcbc". + +- Added support for EAP modules which do not establish an MSK. + - The xauth_modules.verify_secret() function now passes the connection name. - strongswan-4.1.1 ---------------- |