diff options
| author | Martin Willi <martin@revosec.ch> | 2010-07-13 09:34:57 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2010-07-13 10:26:07 +0200 |
| commit | e9448cfc2f28faf286084eb4cbf688db9a1fe12c (patch) | |
| tree | 25027b812657d13ecda7fcad9b895edea50767a4 | |
| parent | f90d465ce28146f218137eb58a80d29e570063bf (diff) | |
| download | strongswan-e9448cfc2f28faf286084eb4cbf688db9a1fe12c.tar.bz2 strongswan-e9448cfc2f28faf286084eb4cbf688db9a1fe12c.tar.xz | |
Added NEWS for revocation/addrblock plugin
| -rw-r--r-- | NEWS | 7 |
1 files changed, 7 insertions, 0 deletions
@@ -7,6 +7,13 @@ strongswan-4.4.1 - The openssl plugin now supports X.509 certificate and CRL functions. +- OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled + by default. Update manual load directives in strongswan.conf. + +- RFC3779 ipAddrBlock constraint checking has been moved to the addrblock + plugin, disabled by default. Enable it and update manual load directives + in strongswan.conf, if required. + - The major refactoring of the IKEv1 Mode Config functionality now allows the transport and handling of any Mode Config attribute. |