updated changelog
This commit is contained in:
Martin Willi
@@ -1,3 +1,177 @@
|
|||||||
|
strongswan-4.0.5 / R:1447
|
||||||
|
===========================
|
||||||
|
|
||||||
|
fixed typos
|
||||||
|
improved selection of ipsec status|statusall <name>
|
||||||
|
fixed NEWS (runtime debug level options)
|
||||||
|
fixed credits
|
||||||
|
fixed very old bug in linked_list's remove_first and remove_last
|
||||||
|
proper "ipsec up" signal handling when initiating to %any
|
||||||
|
removed iterator hook for replace
|
||||||
|
fixed output of proto/port selectors
|
||||||
|
cosmetics
|
||||||
|
due to console logging, no need for final sleep anymore
|
||||||
|
adapted checks to changed ipsec status output
|
||||||
|
due to narrowing no need for rightsubnetwithin
|
||||||
|
no need to send certreq
|
||||||
|
fixed ipsec status|statusall <name>
|
||||||
|
log IKE SPIs on a separate line
|
||||||
|
redesigned formatting of ipsec status|statusall
|
||||||
|
cosmetics
|
||||||
|
version bumps of strongSwan, Linux kernel and Gentoo root file system
|
||||||
|
corrected description
|
||||||
|
added dpd-hold scenario
|
||||||
|
added new features
|
||||||
|
fixed 64 bit issue
|
||||||
|
solved 64 bit issue by changing long to int
|
||||||
|
solved 64 bit issue in push/pop stroke interface
|
||||||
|
fixed 64 bit issue
|
||||||
|
some fixes for doxygen
|
||||||
|
better split up of library files "types.h" & "definitions.h"
|
||||||
|
centralized all printf specifier character definitions
|
||||||
|
reuse of arginfo handlers
|
||||||
|
more cleanups
|
||||||
|
fixed more AMD64 issues
|
||||||
|
added DEBUG_LEVEL compile flag to exclude DBGn() statements
|
||||||
|
added nodebug configure script without any debug messages and without -g
|
||||||
|
preparations to include certreqs in policy decisions
|
||||||
|
do not sent certreq payloads when the peer is known to use PSK
|
||||||
|
position of (myself) moved in log output
|
||||||
|
do not sent certreq payloads when using self-signed certs
|
||||||
|
moved (myself) in log output
|
||||||
|
moved typedefs to beginning of files to solve some include problems
|
||||||
|
splitted authenticator to have a separate implementation for each auth_method_t
|
||||||
|
using va_copy to clone va_lists, should fix proplems on AMD64
|
||||||
|
some other cleanups
|
||||||
|
do not sanitize '*' character
|
||||||
|
fixed SIGSEGV when setup of an additional CHILD_SA fails
|
||||||
|
added IKEv2 clarifications RFC
|
||||||
|
changed debug level of certreq log output
|
||||||
|
cosmetics in debug output
|
||||||
|
support of certreq payload in IKE_AUTH messages
|
||||||
|
chunk_to_hex() function declaration deleted
|
||||||
|
added function certreq_payload_create_from_x509()
|
||||||
|
send a certreq as initiator if other_ca is set
|
||||||
|
added method get_ca_certificate()
|
||||||
|
added methods get_my_ca() and get_other_ca()
|
||||||
|
added methods get_my_ca() and get_other_ca()
|
||||||
|
added some missing 'AUD' entries
|
||||||
|
cosmetics
|
||||||
|
cosmetics
|
||||||
|
change due to change debug output
|
||||||
|
spaces should not be sanitized
|
||||||
|
fixed due to new logging concept
|
||||||
|
some improvements in signaling code
|
||||||
|
include only source NATD payloads really needed
|
||||||
|
updated for NAT team
|
||||||
|
improved signal handling and emitting
|
||||||
|
support of ModeCfg Push mode
|
||||||
|
support of mixed RSA/PSK static connections
|
||||||
|
support of ipsec statusall in state output
|
||||||
|
output of 'DPD active' in ISAKMP SAs
|
||||||
|
support of ipsec statusall in state output
|
||||||
|
added natip support
|
||||||
|
added has_natip flag
|
||||||
|
added ModeCfg push policy and states
|
||||||
|
added ModeCfg push policy and states
|
||||||
|
fixed typo in debug statement
|
||||||
|
redesigned list output format
|
||||||
|
added 'modeconfig=pull|push' and 'left|rightnatip' keywords
|
||||||
|
added has_natip flag
|
||||||
|
added has_natip flag
|
||||||
|
added 'exit' statement in listcerts,.. case
|
||||||
|
fixed two bugs in the time_t and chunk_ct print functions
|
||||||
|
redesigned format of print function
|
||||||
|
replaced 'times' by 'dates'
|
||||||
|
added private flag to asn1_init
|
||||||
|
added private flag to asn1_ctx_t
|
||||||
|
removed DES-EDE3-CBC only comment
|
||||||
|
removed deprecated iterator methods (has_next & current)
|
||||||
|
added iterator hook to manipulate iterator the clean way
|
||||||
|
linked list cleanups
|
||||||
|
added list methods invoke(), destroy_offset(), destroy_function()
|
||||||
|
simplified list destruction when destroying its items
|
||||||
|
added verbosity level to stroke
|
||||||
|
upgrade to new Gentoo root file system and tcpdump command
|
||||||
|
added
|
||||||
|
deleted
|
||||||
|
renamed ikev1 scenario and added ikev2 scenario
|
||||||
|
added new scenarios
|
||||||
|
Version bumps of UML kernel, Gentoo root file system and strongSwan release
|
||||||
|
code cleanups in printf handlers
|
||||||
|
added eap authentication draft for ikev2
|
||||||
|
updated stroke to allow run-time manipulation of debug levels
|
||||||
|
added charondebug config parameter to set debug level at startup
|
||||||
|
introduced new logging subsystem using bus:
|
||||||
|
passive listeners can register on the bus
|
||||||
|
active listeners wait for signals actively
|
||||||
|
multiplexing allows multiple listeners to receive debug signals
|
||||||
|
a lot more...
|
||||||
|
updated file filter for kdev project
|
||||||
|
include CREDITS file in distribution
|
||||||
|
moved various scripts in scripts/ dir
|
||||||
|
add configure script wrappers
|
||||||
|
removed txt files from doxygen
|
||||||
|
removed module tests, outdated. We need something more system-test like
|
||||||
|
added missing -DDEBUG compile option
|
||||||
|
fixed auxillary message data parsing for IPV6 socket
|
||||||
|
using SOL_* constants for socket level
|
||||||
|
fixed IPV6_PKTINFO setsockopt() to work with most kernel headers
|
||||||
|
replaced strerror(errno) with %m printf specifier
|
||||||
|
added stronger certs for moon, carol, and dave
|
||||||
|
added IPv6 hw and multicast addresses
|
||||||
|
adapted to new tcpdump ipv6 output
|
||||||
|
multi-level-ca scenarios use unencrypted private key
|
||||||
|
added scenario
|
||||||
|
fixed timing
|
||||||
|
new gentoo root file system
|
||||||
|
fixed bug with openldap 2.3
|
||||||
|
removed ipsec.conf version information
|
||||||
|
carolKey.pem is now protected by 3DES passphrase
|
||||||
|
updated net runlevel scripts
|
||||||
|
updated net init scripts
|
||||||
|
new net configuration format
|
||||||
|
HW addresses must be predefined
|
||||||
|
cosmetics
|
||||||
|
added USE_LIBCURL
|
||||||
|
cosmetics
|
||||||
|
found libraries are not appended to LIBS anymore
|
||||||
|
version bump to 4.0.5
|
||||||
|
fixed DPD to survive IKE_SA rekeying
|
||||||
|
introduced printf() specifiers for:
|
||||||
|
host_t (%H)
|
||||||
|
identification_t (%D)
|
||||||
|
chunk pointers (%B)
|
||||||
|
memory pointer/length (%b)
|
||||||
|
added a signaling bus:
|
||||||
|
receives event and debug messages, sends them to its listeners
|
||||||
|
stream_logger, sys_logger, file_logger added, listen to bus
|
||||||
|
some other tweaks here and there
|
||||||
|
added often used RFCs and drafts
|
||||||
|
DES for private key encryption is not supported
|
||||||
|
updated NEWS and ChangeLog for 4.0.4 release
|
||||||
|
fixed retransmission policy for responder
|
||||||
|
fixed dpd for responder
|
||||||
|
added ID_ANY check to matches_binary()
|
||||||
|
replaced 'missing value' warning by zero length chunk_t value
|
||||||
|
defined maximum hash size
|
||||||
|
support of AES-192-CBC private key encryption
|
||||||
|
added hostaccess support
|
||||||
|
added hostaccess support
|
||||||
|
moved auth_method to policy
|
||||||
|
added hostaccess support
|
||||||
|
added hostaccess support
|
||||||
|
more consistent authentication logging
|
||||||
|
added hostaccess support
|
||||||
|
moved auth_method to policy
|
||||||
|
moved auth_method to policy
|
||||||
|
added hostaccess support; moved auth_method to policy
|
||||||
|
added hostaccess support
|
||||||
|
added hostaccess support
|
||||||
|
added new test scenarios
|
||||||
|
fixed some compiler warnings
|
||||||
|
|
||||||
|
|
||||||
strongswan-4.0.4 / R:1289
|
strongswan-4.0.4 / R:1289
|
||||||
===========================
|
===========================
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user