denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

added latest NEWS

Browse Source
This commit is contained in:
Andreas Steffen
2009-07-17 22:54:23 +02:00
parent d9b67a9fc0
commit aa74d70595
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+12
View File
@@ -1,12 +1,24 @@
strongswan-4.3.3 strongswan-4.3.3
---------------- ----------------
- The configuration option --enable-integrity-test plus the strongswan.conf
option libstrongswan.integrity_test = yes activate integrity tests
of the IKE daemons charon and pluto, libstrongswan and all loaded
plugins. Thus dynamic library misconfigurations and non-malicious file
manipulations can be reliably detected.
- The new default setting libstrongswan.ecp_x_coordinate_only=yes allows - The new default setting libstrongswan.ecp_x_coordinate_only=yes allows
IKEv1 interoperability with MS Windows using the ECP DH groups 19 and 20. IKEv1 interoperability with MS Windows using the ECP DH groups 19 and 20.
- The IKEv1 pluto daemon now supports the AES-CCM and AES-GCM ESP - The IKEv1 pluto daemon now supports the AES-CCM and AES-GCM ESP
authenticated encryption algorithms. authenticated encryption algorithms.
- The IKEv1 pluto daemon now supports V4 OpenPGP keys.
- The RDN parser vulnerability discovered by Orange Labs research team
was not completely fixed in version 4.3.2. Some more modifications
had to be applied to the asn1_length() function to make it robust.
strongswan-4.3.2 strongswan-4.3.2
---------------- ----------------