Project

General

Profile

Version 4.1.9

  • The default _updown script now dynamically inserts and removes ip6tables
    firewall rules if leftfirewall=yes is set in IPv6 connections. New IPv6
    net-net and roadwarrior (PSK/RSA) scenarios for both IKEv1 and IKEV2 were
    added.
  • Implemented RFC4478 repeated authentication to force EAP/Virtual-IP clients
    to reestablish an IKE_SA within a given timeframe.
  • strongSwan Manager supports configuration listing, initiation and termination
    of IKE and CHILD_SAs.
  • Fixes and improvements to multithreading code.
  • IKEv2 plugins have been renamed to libcharon-* to avoid naming conflicts.
    Make sure to remove the old plugins in $libexecdir/ipsec, otherwise they get
    loaded twice.