Added some NEWS

2009-09-15 09:13:31 +02:00
parent 9f45b19fe7
commit b6b90b68a1
1 changed files with 120 additions and 96 deletions
@@ -1,3 +1,27 @@
 strongswan-4.3.5
 ----------------
 - The private/public key parsing and encoding has been splitted up to the
  separate pkcs1, pgp, pem and dnskey plugins. The key implementation plugins
  gmp, gcrypt and openssl can all make use of them.
 - The IKEv2 daemon charon gained basic PGP support. It can use pre-installed
  peer certificates and can issue signatures based on RSA private keys.
 - The new 'ipsec pki' tool provides a set of commands to maintain a public
  key infrastructure. It currently supports operations to create RSA and ECDSA
  private/public keys, calculate fingerprints and issue or verify certificates.
 - Charon uses a monotonic time source for statistics and job queueing, behaving
  correctly if the system time changes (e.g. when using NTP).
 - In addition to time based rekeying, charon supports IPsec SA lifetimes based
  on processed volume or number of packets. They new ipsec.conf paramaters
  'lifetime' (an alias to 'keylife'), 'lifebytes' and 'lifepackets' handle
  SA timeouts, while the parameters 'margintime' (an alias to rekeymargin),
  'marginbytes' and 'marginpackets' trigger the rekeying before a SA expires.
  The existing parameter 'rekeyfuzz' affects all margins.
 strongswan-4.3.4
 ----------------