Version 4.2.9 » History » Version 4
Tobias Brunner, 01.09.2009 14:21
Changes for Version 4.2.9
| 1 | 4 | Tobias Brunner | h1. Version 4.2.9 |
|---|---|---|---|
| 2 | 1 | Andreas Steffen | |
| 3 | 4 | Tobias Brunner | * Flexible configuration of logging subsystem allowing to log to multiple |
| 4 | 4 | Tobias Brunner | syslog facilities or to files using fine-grained log levels for each target. |
| 5 | 4 | Tobias Brunner | |
| 6 | 4 | Tobias Brunner | * Load testing plugin to do stress testing of the IKEv2 daemon against self |
| 7 | 4 | Tobias Brunner | or another host. Found and fixed issues during tests in the multi-threaded |
| 8 | 4 | Tobias Brunner | use of the OpenSSL plugin. |
| 9 | 4 | Tobias Brunner | |
| 10 | 4 | Tobias Brunner | * Added profiling code to synchronization primitives to find bottlenecks if |
| 11 | 4 | Tobias Brunner | running on multiple cores. Found and fixed an issue where parts of the |
| 12 | 4 | Tobias Brunner | Diffie-Hellman calculation acquired an exclusive lock. This greatly improves |
| 13 | 4 | Tobias Brunner | parallelization to multiple cores. |
| 14 | 4 | Tobias Brunner | |
| 15 | 4 | Tobias Brunner | * updown script invocation has been separated into a plugin of its own to |
| 16 | 4 | Tobias Brunner | further slim down the daemon core. |
| 17 | 4 | Tobias Brunner | |
| 18 | 4 | Tobias Brunner | * Separated IKE_SA/CHILD_SA key derivation process into a closed system, |
| 19 | 4 | Tobias Brunner | allowing future implementations to use a secured environment in e.g. kernel |
| 20 | 4 | Tobias Brunner | memory or hardware. |
| 21 | 4 | Tobias Brunner | |
| 22 | 4 | Tobias Brunner | * The kernel interface of charon has been modularized. XFRM NETLINK (default) |
| 23 | 4 | Tobias Brunner | and PFKEY (--enable-kernel-pfkey) interface plugins for the native IPsec |
| 24 | 4 | Tobias Brunner | stack of the Linux 2.6 kernel as well as a PFKEY interface for the KLIPS |
| 25 | 4 | Tobias Brunner | IPsec stack (--enable-kernel-klips) are provided. |
| 26 | 4 | Tobias Brunner | |
| 27 | 4 | Tobias Brunner | * Basic Mobile IPv6 support has been introduced, securing Binding Update |
| 28 | 4 | Tobias Brunner | messages as well as tunneled traffic between Mobile Node and Home Agent. |
| 29 | 4 | Tobias Brunner | The installpolicy=no option allows peaceful cooperation with a dominant |
| 30 | 4 | Tobias Brunner | mip6d daemon and the new type=transport_proxy implements the special MIPv6 |
| 31 | 4 | Tobias Brunner | IPsec transport proxy mode where the IKEv2 daemon uses the Care-of-Address |
| 32 | 4 | Tobias Brunner | but the IPsec SA is set up for the Home Adress. |
| 33 | 4 | Tobias Brunner | |
| 34 | 4 | Tobias Brunner | * Implemented migration of Mobile IPv6 connections using the KMADDRESS |
| 35 | 4 | Tobias Brunner | field contained in XFRM_MSG_MIGRATE messages sent by the mip6d daemon |
| 36 | 4 | Tobias Brunner | via the Linux 2.6.28 (or appropriately patched) kernel. |