Add NEWS about proposals with PRFs different from integrity protection algorithms

2012-10-24 11:52:59 +02:00
parent 5b2e669ba2
commit 6910e5c753
1 changed files with 4 additions and 0 deletions
@@ -12,6 +12,10 @@ strongswan-5.0.2
  tunnels. The "ipsec lookip" command can be used to query such information
  or receive notifications.

+- IKE proposals can now use a PRF algorithm different to that defined for
+  integrity protection. If an algorithm with a "prf" prefix is defined
+  explicitly (such as prfsha1 or prfsha256), no implicit PRF algorithm based on
+  the integrity algorithm is added to the proposal.

 strongswan-5.0.1
 ----------------