Project

General

Profile

Version 4.3.0 » History » Version 4

Tobias Brunner, 01.09.2009 14:27
Changes for Version 4.3.0

1 3 Tobias Brunner
h1. 4.3.0
2 3 Tobias Brunner
3 4 Tobias Brunner
* Support for the IKEv2 Multiple Authentication Exchanges extension (RFC4739).
4 4 Tobias Brunner
  Initiators and responders can use several authentication rounds (e.g. RSA
5 4 Tobias Brunner
  followed by EAP) to authenticate. The new ipsec.conf leftauth/rightauth and
6 4 Tobias Brunner
  leftauth2/rightauth2 parameters define own authentication rounds or setup
7 4 Tobias Brunner
  constraints for the remote peer. See the ipsec.conf man page for more detials.
8 4 Tobias Brunner
9 4 Tobias Brunner
* If glibc printf hooks (register_printf_function) are not available,
10 4 Tobias Brunner
  strongSwan can use the vstr string library to run on non-glibc systems.
11 4 Tobias Brunner
12 4 Tobias Brunner
* The IKEv2 charon daemon can now configure the ESP CAMELLIA-CBC cipher
13 4 Tobias Brunner
  (esp=camellia128|192|256).
14 4 Tobias Brunner
15 4 Tobias Brunner
* Refactored the pluto and scepclient code to use basic functions (memory
16 4 Tobias Brunner
  allocation, leak detective, chunk handling, printf_hooks, strongswan.conf
17 4 Tobias Brunner
  attributes, ASN.1 parser, etc.) from the libstrongswan library.
18 4 Tobias Brunner
19 4 Tobias Brunner
* Up to two DNS and WINS servers to be sent via IKEv1 ModeConfig can be
20 4 Tobias Brunner
  configured in the pluto section of strongswan.conf.