diff options
| author | Tobias Brunner <tobias@strongswan.org> | 2017-08-08 20:05:30 +0200 |
|---|---|---|
| committer | Tobias Brunner <tobias@strongswan.org> | 2017-08-08 20:05:30 +0200 |
| commit | f237bfcb9e50deed8659c4fb2a4f3bec6a27568c (patch) | |
| tree | 8853b9ae07824a26141460893cac2b18d4ccf36b | |
| parent | e66c3d41bc7bad92d650cd0683dcb91f19f7df47 (diff) | |
| download | strongswan-f237bfcb9e50deed8659c4fb2a4f3bec6a27568c.tar.bz2 strongswan-f237bfcb9e50deed8659c4fb2a4f3bec6a27568c.tar.xz | |
NEWS: Added some news
| -rw-r--r-- | NEWS | 14 |
1 files changed, 13 insertions, 1 deletions
@@ -4,7 +4,7 @@ strongswan-5.6.0 - New SWIMA IMC/IMV pair implements the "draft-ietf-sacm-nea-swima-patnc" Internet Draft and has been demonstrated at the IETF 99 Prague Hackathon. -- The IMV database template has been adapted to achieve full compliancei +- The IMV database template has been adapted to achieve full compliance with the ISO 19770-2:2015 SWID tag standard. - The sw-collector tool extracts software events from apt history logs @@ -18,6 +18,18 @@ strongswan-5.6.0 - libtpmtss supports Intel's TSS2 Architecture Broker and Resource Manager interface (tcti-tabrmd). +- The new eap-aka-3gpp plugin implements the 3GPP MILENAGE algorithms + in software. K (optionally concatenated with OPc) may be configured as + binary EAP secret. + +- CHILD_SA rekeying was fixed in charon-tkm and was slightly changed: The + switch to the new outbound IPsec SA now happens via SPI on the outbound + policy on Linux, and in case of lost rekey collisions no outbound SA/policy + is temporarily installed for the redundant CHILD_SA. + +- The new %unique-dir value for mark* settings allocates separate unique marks + for each CHILD_SA direction (in/out). + strongswan-5.5.3 ---------------- |