denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added MIPv6 functionality to NEWS

Browse Source
This commit is contained in:
Andreas Steffen
2008-11-13 05:46:51 +00:00
parent cd49134837
commit 509e07c5bc
1 changed files with 16 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+16 -7
View File
@@ -1,8 +1,8 @@
strongswan-4.2.9 strongswan-4.2.9
---------------- ----------------
- Flexible configuration of logging subsystem to different syslog facilities - Flexible configuration of logging subsystem allowing to log to multiple
or files using fine-grained log levels for each target. syslog facilities or to files using fine-grained log levels for each target.
- Load testing plugin to do stress testing of the IKEv2 daemon against self - Load testing plugin to do stress testing of the IKEv2 daemon against self
or another host. Found and fixed issues during tests in the multi-threaded or another host. Found and fixed issues during tests in the multi-threaded
@@ -13,15 +13,24 @@ strongswan-4.2.9
Diffie-Hellman calculation acquired an exclusive lock. This greatly improves Diffie-Hellman calculation acquired an exclusive lock. This greatly improves
parallelization to multiple cores. parallelization to multiple cores.
- updown script invocation has been separated in an own plugin to further - updown script invocation has been separated into a plugin of its own to
slim down the daemon core. further slim down the daemon core.
- separated IKE_SA/CHILD_SA key derivation process into a closed system, - Separated IKE_SA/CHILD_SA key derivation process into a closed system,
allowing future implementations to use a secured environment in e.g. kernel allowing future implementations to use a secured environment in e.g. kernel
memory or hardware. memory or hardware.
- The kernel interface of charon has been modularized. Plugins for the native - The kernel interface of charon has been modularized. XFRM NETLINK (default)
IPsec stack of the Linux 2.6 kernel and the KLIPS IPsec stack are provided. and PFKEY (--enable-kernel-pfkey) interface plugins for the native IPsec
stack of the Linux 2.6 kernel as well as a PFKEY interface for the KLIPS
IPsec stack (--enable-kernel-klips) are provided.
- Basic Mobile IPv6 support has been introduced, securing Binding Update
messages as well as tunneled traffic between Mobile Node and Home Agent.
The installpolicy=no option allows peaceful cooperation with a dominant
mip6d daemon and the new type=transport_proxy implements the special MIPv6
IPsec transport proxy mode where the IKEv2 daemon uses the Care-of-Address
but the IPsec SA is set up for the Home Adress.
strongswan-4.2.8 strongswan-4.2.8