Return to 52.html CVS log | Up to [local] / www |
version 1.40, 2012/09/08 18:06:22 | version 1.41, 2012/09/08 21:35:07 | ||
---|---|---|---|
|
|
||
now recognize additional Internet Key Exchange DH groups. | now recognize additional Internet Key Exchange DH groups. | ||
<li>Various improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&sektion=8">iked(8)</a> | <li>Various improvements in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&sektion=8">iked(8)</a> | ||
including support for retransmits. | including support for retransmits. | ||
<li>Enabled use of AES-CTR for IPsec ESP in | |||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&sektion=8">iked(8)</a> and | |||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=iked&sektion=8">isakmpd(8)</a>. | |||
<li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecctl&sektion=8">ipsecctl(8)</a> | <li><a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecctl&sektion=8">ipsecctl(8)</a> | ||
now allows SA lifetimes to be specified in its | now allows SA lifetimes to be specified in its | ||
<a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec.conf&sektion=5">ipsec.conf(5)</a> | <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec.conf&sektion=5">ipsec.conf(5)</a> | ||
|
|
||
<li>Allow to set the tos on IPv6 packets. | <li>Allow to set the tos on IPv6 packets. | ||
<li>Better demotion handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to prevent failovers without having a full state table. | <li>Better demotion handling in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfsync&sektion=4">pfsync(4)</a> to prevent failovers without having a full state table. | ||
<li>Fixed printing of wildcard anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. | <li>Fixed printing of wildcard anchors in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>. | ||
<li>Allow the address family to be implicit for af-to rules in <a href="http://www.openbsd.org/cgi-bin/man.cgi?query=pfctl&sektion=8">pfctl(8)</a>, | |||
where if the address family can be determined by the "from" or "to" address, | |||
it is no longer necessary to specify "inet" or "inet6". | |||
<li>... | <li>... | ||
</ul> | </ul> | ||
<p> | <p> |