denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge branch 'ikev1-fragmentation'

Browse Source 
This adds support for the proprietary IKEv1 fragmentation extension.

Conflicts:
	NEWS
This commit is contained in:
Tobias Brunner
2013-01-12 11:58:26 +01:00
parent 54a1a75b2f f31b418094
commit 21235e1ec2
37 changed files with 882 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+4
View File
@@ -35,6 +35,10 @@ strongswan-5.0.2
In contrast to our own DER parser, OpenSSL can handle BER files, which is
required for interoperability of our scepclient with EJBCA.
- Support for the proprietary IKEv1 fragmentation extension has been added.
Fragments are always handled on receipt but only sent if supported by the peer
and if enabled with the new fragmentation ipsec.conf option.
- IKEv1 in charon can now parse certificates received in PKCS#7 containers and
supports NAT traversal as used by Windows clients. Patches courtesy of
Volker Rümelin.