From 5a6e5e0d2d2c62dc31e1866432a6584b3150f000 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Tue, 12 Jun 2012 14:43:55 +0200 Subject: [PATCH] NEWS about specifying trustchain HASH algorithm requirements --- NEWS | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS b/NEWS index b7d1104ab..45f7de835 100644 --- a/NEWS +++ b/NEWS @@ -15,6 +15,13 @@ strongswan-5.0.0 - Source routes are reinstalled if interfaces are reactivated or IP addresses reappear. +- In addition to trustchain key strength definitions for different public key + systems, the rightauth option now takes a list of signature hash algorithms + considered save for trustchain validation. For example, the setting + rightauth=rsa-2048-ecdsa-256-sha256-sha384-sha512 requires a trustchain + that uses at least RSA-2048 or ECDSA-256 keys and certificate signatures + using SHA-256 or better. + strongswan-4.6.4 ----------------