Added some NEWS

2009-09-15 09:13:31 +02:00
parent 9f45b19fe7
commit b6b90b68a1
1 changed files with 120 additions and 96 deletions
@@ -1,3 +1,27 @@
+strongswan-4.3.5
+----------------
+
+- The private/public key parsing and encoding has been splitted up to the
+  separate pkcs1, pgp, pem and dnskey plugins. The key implementation plugins
+  gmp, gcrypt and openssl can all make use of them.
+
+- The IKEv2 daemon charon gained basic PGP support. It can use pre-installed
+  peer certificates and can issue signatures based on RSA private keys.
+
+- The new 'ipsec pki' tool provides a set of commands to maintain a public
+  key infrastructure. It currently supports operations to create RSA and ECDSA
+  private/public keys, calculate fingerprints and issue or verify certificates.
+
+- Charon uses a monotonic time source for statistics and job queueing, behaving
+  correctly if the system time changes (e.g. when using NTP).
+
+- In addition to time based rekeying, charon supports IPsec SA lifetimes based
+  on processed volume or number of packets. They new ipsec.conf paramaters
+  'lifetime' (an alias to 'keylife'), 'lifebytes' and 'lifepackets' handle
+  SA timeouts, while the parameters 'margintime' (an alias to rekeymargin),
+  'marginbytes' and 'marginpackets' trigger the rekeying before a SA expires.
+  The existing parameter 'rekeyfuzz' affects all margins.
+
 strongswan-4.3.4
 ----------------