Version 4.3.0 » History » Version 4
Tobias Brunner, 01.09.2009 14:27
Changes for Version 4.3.0
1 | 3 | Tobias Brunner | h1. 4.3.0 |
---|---|---|---|
2 | 3 | Tobias Brunner | |
3 | 4 | Tobias Brunner | * Support for the IKEv2 Multiple Authentication Exchanges extension (RFC4739). |
4 | 4 | Tobias Brunner | Initiators and responders can use several authentication rounds (e.g. RSA |
5 | 4 | Tobias Brunner | followed by EAP) to authenticate. The new ipsec.conf leftauth/rightauth and |
6 | 4 | Tobias Brunner | leftauth2/rightauth2 parameters define own authentication rounds or setup |
7 | 4 | Tobias Brunner | constraints for the remote peer. See the ipsec.conf man page for more detials. |
8 | 4 | Tobias Brunner | |
9 | 4 | Tobias Brunner | * If glibc printf hooks (register_printf_function) are not available, |
10 | 4 | Tobias Brunner | strongSwan can use the vstr string library to run on non-glibc systems. |
11 | 4 | Tobias Brunner | |
12 | 4 | Tobias Brunner | * The IKEv2 charon daemon can now configure the ESP CAMELLIA-CBC cipher |
13 | 4 | Tobias Brunner | (esp=camellia128|192|256). |
14 | 4 | Tobias Brunner | |
15 | 4 | Tobias Brunner | * Refactored the pluto and scepclient code to use basic functions (memory |
16 | 4 | Tobias Brunner | allocation, leak detective, chunk handling, printf_hooks, strongswan.conf |
17 | 4 | Tobias Brunner | attributes, ASN.1 parser, etc.) from the libstrongswan library. |
18 | 4 | Tobias Brunner | |
19 | 4 | Tobias Brunner | * Up to two DNS and WINS servers to be sent via IKEv1 ModeConfig can be |
20 | 4 | Tobias Brunner | configured in the pluto section of strongswan.conf. |