diff options
| author | Martin Willi <martin@strongswan.org> | 2009-11-26 15:58:55 +0100 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2009-11-26 16:03:06 +0100 |
| commit | 2b2c69e992d5e279ecde7d3ebf20804d59b8bf0d (patch) | |
| tree | c55fafe62b0b97c5a4d34c09040a56d482bb7b4d /NEWS | |
| parent | 52fd0ef9e09d0bb7362e521c04e59b4712703f75 (diff) | |
| download | strongswan-2b2c69e992d5e279ecde7d3ebf20804d59b8bf0d.tar.bz2 strongswan-2b2c69e992d5e279ecde7d3ebf20804d59b8bf0d.tar.xz | |
Use transport mode ESP SA if IPcomp is used, IPcomp already applies outer IP header
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 6 |
1 files changed, 5 insertions, 1 deletions
@@ -5,7 +5,7 @@ strongswan-4.3.6 - More detailed IKEv2 EAP payload information in debug output -- IKEv2 EAP-SIM and EAP-AKA share joint libsimaka library +- IKEv2 EAP-SIM and EAP-AKA share joint libsimaka library - Added required userland changes for proper SHA256 and SHA384/512 in ESP that will be introduced with Linux 2.6.33. The "sha256"/"sha2_256" keyword now @@ -13,6 +13,10 @@ strongswan-4.3.6 bit truncation used by previous releases. To use the old 96 bit truncation scheme, the new "sha256_96" proposal keyword has been introduced. +- Fixed IPComp in tunnel mode, stripping out the duplicated outer header. This + change makes IPcomp tunnel mode connections incompatible with previous + releases; disable compression on such tunnels. + strongswan-4.3.5 ---------------- |