Version 4.1.6 » History » Version 3
Tobias Brunner, 01.09.2009 13:57
Changes for Version 4.1.6
1 | 3 | Tobias Brunner | h1. Version 4.1.6 |
---|---|---|---|
2 | 3 | Tobias Brunner | |
3 | 3 | Tobias Brunner | * Since some third party IKEv2 implementations run into |
4 | 3 | Tobias Brunner | problems with strongSwan announcing MOBIKE capability per |
5 | 3 | Tobias Brunner | default, MOBIKE can be disabled on a per-connection-basis |
6 | 3 | Tobias Brunner | using the mobike=no option. Whereas mobike=no disables the |
7 | 3 | Tobias Brunner | sending of the MOBIKE_SUPPORTED notification and the floating |
8 | 3 | Tobias Brunner | to UDP port 4500 with the IKE_AUTH request even if no NAT |
9 | 3 | Tobias Brunner | situation has been detected, strongSwan will still support |
10 | 3 | Tobias Brunner | MOBIKE acting as a responder. |
11 | 3 | Tobias Brunner | |
12 | 3 | Tobias Brunner | * the default ipsec routing table plus its corresponding priority |
13 | 3 | Tobias Brunner | used for inserting source routes has been changed from 100 to 220. |
14 | 3 | Tobias Brunner | It can be configured using the --with-ipsec-routing-table and |
15 | 3 | Tobias Brunner | --with-ipsec-routing-table-prio options. |
16 | 3 | Tobias Brunner | |
17 | 3 | Tobias Brunner | * the --enable-integrity-test configure option tests the |
18 | 3 | Tobias Brunner | integrity of the libstrongswan crypto code during the charon |
19 | 3 | Tobias Brunner | startup. |
20 | 3 | Tobias Brunner | |
21 | 3 | Tobias Brunner | * the --disable-xauth-vid configure option disables the sending |
22 | 3 | Tobias Brunner | of the XAUTH vendor ID. This can be used as a workaround when |
23 | 3 | Tobias Brunner | interoperating with some Windows VPN clients that get into |
24 | 3 | Tobias Brunner | trouble upon reception of an XAUTH VID without eXtended |
25 | 3 | Tobias Brunner | AUTHentication having been configured. |
26 | 3 | Tobias Brunner | |
27 | 3 | Tobias Brunner | * ipsec stroke now supports the rereadsecrets, rereadaacerts, |
28 | 3 | Tobias Brunner | rereadacerts, and listacerts options. |