From 466abb49fc3a2dba85a7d6389ea6b7408d176f4a Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Fri, 18 Apr 2008 21:42:31 +0000 Subject: [PATCH] updated NEWS: support of AES_XCBC_MAC and CAMELLIA --- NEWS | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/NEWS b/NEWS index f593e8c3a..0e4328e49 100644 --- a/NEWS +++ b/NEWS @@ -28,15 +28,20 @@ strongswan-4.2.1 plugins to provide virtual IP addresses, and in the future, other configuration attribute services (e.g. DNS/WINS servers). -- The stroke plugin has been extended to provide virutal IP addresses from +- The stroke plugin has been extended to provide virtual IP addresses from a pool defined in ipsec.conf. The "rightsourceip" parameter now accepts address pools in CIDR notation (e.g. 10.1.1.0/24). The parameter also accepts the value "%poolname", where "poolname" identifies a pool provided by a - seperate plugin. + separate plugin. - Fixed compilation on uClibc and a couple of minor bugs. -- set DPD defaults to dpd_delay=30s and dpd_timeout=150s. +- set DPD defaults in ipsec starter to dpd_delay=30s and dpd_timeout=150s. + +- The IKEv1 pluto daemon now supports the ESP encryption algorithm CAMELLIA + with bit lengths of 128, 192, and 256 bits, as well as the authentication + algorithm AES_XCBC_MAC. Configuration example: esp=camellia192-aesxcbc. + strongswan-4.2.0 ----------------