Version 4.1.10 » History » Version 3
Tobias Brunner, 01.09.2009 14:01
Changes for Version 4.1.10
1 | 3 | Tobias Brunner | h1. Version 4.1.10 |
---|---|---|---|
2 | 3 | Tobias Brunner | |
3 | 3 | Tobias Brunner | * Fixed error in the ordering of the certinfo_t records in the ocsp cache that |
4 | 3 | Tobias Brunner | caused multiple entries of the same serial number to be created. |
5 | 3 | Tobias Brunner | |
6 | 3 | Tobias Brunner | * Implementation of a simple EAP-MD5 module which provides CHAP |
7 | 3 | Tobias Brunner | authentication. This may be interesting in conjunction with certificate |
8 | 3 | Tobias Brunner | based server authentication, as weak passwords can't be brute forced |
9 | 3 | Tobias Brunner | (in contradiction to traditional IKEv2 PSK). |
10 | 3 | Tobias Brunner | |
11 | 3 | Tobias Brunner | * A complete software based implementation of EAP-AKA, using algorithms |
12 | 3 | Tobias Brunner | specified in 3GPP2 (S.S0055). This implementation does not use an USIM, |
13 | 3 | Tobias Brunner | but reads the secrets from ipsec.secrets. Make sure to read eap_aka.h |
14 | 3 | Tobias Brunner | before using it. |
15 | 3 | Tobias Brunner | |
16 | 3 | Tobias Brunner | * Support for vendor specific EAP methods using Expanded EAP types. The |
17 | 3 | Tobias Brunner | interface to EAP modules has been slightly changed, so make sure to |
18 | 3 | Tobias Brunner | check the changes if you're already rolling your own modules. |