From a0a0bdd727313b864cf0a3bcbea19c8d25e19f4d Mon Sep 17 00:00:00 2001 From: Andreas Steffen Date: Tue, 3 Jul 2007 12:51:29 +0000 Subject: [PATCH] starter bug fix and pkcs11initargs patch by Robert Varga --- NEWS | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/NEWS b/NEWS index f311f7677a..8ed4fbda41 100644 --- a/NEWS +++ b/NEWS @@ -35,6 +35,17 @@ strongswan-4.1.4 cannot be resolved by DNS then right=%any will be used so that passive connections as a responder are still possible. +- The new pkcs11initargs parameter that can be placed in the + setup config section of /etc/ipsec.conf allows the definition + of an argument string that is used with the PKCS#11 C_Initialize() + function. This non-standard feature is required by the NSS softoken + library. This patch was contributed by Robert Varga. + +- Fixed a bug in ipsec starter introduced by strongswan-2.8.5 + which caused a segmentation fault in the presence of unknown + or misspelt keywords in ipsec.conf. This bug fix was contributed + by Robert Varga. + - Partial support for MOBIKE in IKEv2. The initiator acts on interface/ address configuration changes and updates IKE and IPsec SAs dynamically.