diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2007-09-02 11:24:53 +0000 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2007-09-02 11:24:53 +0000 |
| commit | 3eac4dfdda3bcd5497d1d3ef64f33bd4bf4e753f (patch) | |
| tree | a2868ad38495c7fc8d1e949105748619fba85aa0 | |
| parent | 0e3073608dcad5f99c0926ec3c18262eac899ca3 (diff) | |
| download | strongswan-3eac4dfdda3bcd5497d1d3ef64f33bd4bf4e753f.tar.bz2 strongswan-3eac4dfdda3bcd5497d1d3ef64f33bd4bf4e753f.tar.xz | |
added new features
| -rw-r--r-- | NEWS | 20 |
1 files changed, 20 insertions, 0 deletions
@@ -1,10 +1,30 @@ strongswan-4.1.6 ---------------- +- Since some third party IKEv2 implementations run into + problems with strongSwan announcing MOBIKE capability per + default, MOBIKE can be disabled on a per-connection-basis + using the mobike=no option. Whereas mobike=no disables the + sending of the MOBIKE_SUPPORTED notification and the floating + to UDP port 4500 with the IKE_AUTH request even if no NAT + situation has been detected, strongSwan will still support + MOBIKE acting as a responder. + +- the default ipsec routing table plus its corresponding priority + used for inserting source routes has been changed from 100 to 220. + It can be configured using the --with-ipsec-routing-table and + --with-ipsec-routing-table-prio options. + - the --enable-integrity-test configure option tests the integrity of the libstrongswan crypto code during the charon startup. +- the --disable-xauth-vid configure option disables the sending + of the XAUTH vendor ID. This can be used as a workaround when + interoperating with some Windows VPN clients that get into + trouble upon reception of an XAUTH VID without eXtended + AUTHentication having been configured. + - ipsec stroke now supports the rereadsecrets, rereadaacerts, rereadacerts, and listacerts options. |