denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ldap-based crl fetching supported

Browse Source
This commit is contained in:
Andreas Steffen
2007-04-06 09:51:04 +00:00
parent 2c0e0f4f62
commit db88e37d2f
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
NEWS
+4 -4
View File
@@ -8,6 +8,10 @@ strongswan-4.1.1
compared to properly detect retransmissions and incoming retransmits are compared to properly detect retransmissions and incoming retransmits are
detected even if the IKE_SA is blocked (e.g. doing OCSP fetches). detected even if the IKE_SA is blocked (e.g. doing OCSP fetches).
- The IKEv2 daemon charon now supports dynamic http- and ldap-based CRL
fetching enabled by crlcheckinterval > 0 and caching fetched CRLs
enabled by cachecrls=yes.
- Added the configuration options --enable-nat-transport which enables - Added the configuration options --enable-nat-transport which enables
the potentially insecure NAT traversal for IPsec transport mode and the potentially insecure NAT traversal for IPsec transport mode and
--disable-vendor-id which disables the sending of the strongSwan --disable-vendor-id which disables the sending of the strongSwan
@@ -21,10 +25,6 @@ strongswan-4.1.1
- Added the NATT_IETF_02_N Vendor ID in order to support IKEv1 connections - Added the NATT_IETF_02_N Vendor ID in order to support IKEv1 connections
with Windows 2003 Server which uses a wrong VID hash. with Windows 2003 Server which uses a wrong VID hash.
- The IKEv2 daemon charon now supports dynamic http-based CRL fetching
enabled by crlcheckinterval > 0 and caching fetched CRLs enabled by
cachecrls=yes.
strongswan-4.1.0 strongswan-4.1.0
---------------- ----------------