From 998ca0ea9c173d0e72e05373260646a8dad6dce5 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Fri, 25 May 2007 11:06:03 +0000 Subject: [PATCH] updated NEWS for 4.1.3 --- NEWS | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/NEWS b/NEWS index c8ec9b7e5..9883cdc10 100644 --- a/NEWS +++ b/NEWS @@ -7,6 +7,22 @@ strongswan-4.1.3 - IKEv2 authentication based on RSA signatures now can handle multiple certificates issued for a given peer ID. +- IKEv2: Support for requesting a specific virtual IP using leftsourceip on the + client and returning requested virtual IPs using rightsourceip=%config + on the server. If the server does not support configuration payloads, the + client enforces its leftsourceip parameter. + +- The ./configure options --with-uid/--with-gid allow pluto and charon + to drop their privileges to a minimum and change to an other UID/GID. This + improves the systems security, as a possible intruder may only get the + CAP_NET_ADMIN capability. + +- Further modularization of charon: Pluggable control interface and + configuration backend modules provide extensibility. The control interface + for stroke is included, and further interfaces using DBUS (NetworkManager) + or XML are on the way. A backend for storing configurations in the daemon + is provided and more advanced backends (using e.g. a database) are trivial + to implement. strongswan-4.1.2 ----------------