diff options
| author | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-07-17 17:25:01 +0200 |
|---|---|---|
| committer | Andreas Steffen <andreas.steffen@strongswan.org> | 2010-07-17 17:25:01 +0200 |
| commit | b22bb9f21c5637ceb2a4d93680d0b08d3b2ed9a0 (patch) | |
| tree | 1831decd2c749845861834c662ecda2470790e56 | |
| parent | f5baa5c4cf6430a258adf4c971f067253bb7b9e4 (diff) | |
| download | strongswan-b22bb9f21c5637ceb2a4d93680d0b08d3b2ed9a0.tar.bz2 strongswan-b22bb9f21c5637ceb2a4d93680d0b08d3b2ed9a0.tar.xz | |
updated NEWS
| -rw-r--r-- | NEWS | 7 |
1 files changed, 5 insertions, 2 deletions
@@ -2,9 +2,12 @@ strongswan-4.4.1 ---------------- - Support of xfrm marks in IPsec SAs and IPsec policies introduced - with the Linux 2.6.34 kernel. For details see example scenarios - ikev2/nat-two-rw-mark and ikev2/net2net-psk-dscp. + with the Linux 2.6.34 kernel. For details see the example scenarios + ikev2/nat-two-rw-mark, ikev2/rw-nat-mark-in-out and ikev2/net2net-psk-dscp. +- The PLUTO_MARK_IN and PLUTO_ESP_ENC environment variables can be used + in the updown scripts to set marks on inbound ESP or ESP_IN_UDP packets. + - The openssl plugin now supports X.509 certificate and CRL functions. - OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled |