added support of AES-CCM and AES-GCM
This commit is contained in:
@@ -1,15 +1,21 @@
|
|||||||
strongswan-4.2.2
|
strongswan-4.2.2
|
||||||
----------------
|
----------------
|
||||||
|
|
||||||
- Plugins for libstrongswan and charon are loaded depending on the
|
- Plugins for libstrongswan and charon can optionally be loaded according
|
||||||
configration in strongswan.conf. Most components provide a
|
to a configuration in strongswan.conf. Most components provide a
|
||||||
"load = " option followed by a space separated list of plugins to load.
|
"load = " option followed by a space separated list of plugins to load.
|
||||||
Have a look to the distributed strongswan.conf.
|
This allows e.g. the fallback from a hardware crypto accelerator to
|
||||||
|
to software-based crypto plugins.
|
||||||
|
|
||||||
- Charons SQL plugin has been extended by a virtual IP address pool.
|
- Charons SQL plugin has been extended by a virtual IP address pool.
|
||||||
Configurations with rightsourceip=%poolname setting query the database
|
Configurations with a rightsourceip=%poolname setting query a SQLite or
|
||||||
for leases. The "ipsec pool" command helps in administrating the pool
|
MySQL database for leases. The "ipsec pool" command helps in administrating
|
||||||
database.
|
the pool database. See ipsec pool --help for the available options
|
||||||
|
|
||||||
|
- The Authenticated Encryption Algorithms AES-CCM-8/12/16 and AES-GCM-8/12/16
|
||||||
|
for ESP are now supported starting with the Linux 2.6.25 kernel. The
|
||||||
|
syntax is e.g. esp=aes128ccm12 or esp=aes256gcm16.
|
||||||
|
|
||||||
|
|
||||||
strongswan-4.2.1
|
strongswan-4.2.1
|
||||||
----------------
|
----------------
|
||||||
|
|||||||
Reference in New Issue
Block a user