- The IKEv1 pluto daemon can now use SQL-based address pools to deal out
virtual IP addresses as a Mode Config server. The pool capability has been
migrated from charon's sql plugin to a new attr-sql plugin which is loaded
- by libstrongswan and which can be used by both daemons either with a SQLite
+ by libstrongswan and which can be used by both daemons either with a SQLite
or MySQL database and the corresponding plugin.
+- Plugin names have been streamlined: EAP plugins now have a dash after eap
+ (e.g. eap-sim), as it is used with the --enable-eap-sim ./configure option.
+ Plugin configuration sections in strongswan.conf now use the same name as the
+ plugin itself (i.e. with a dash). Make sure to update "load" directives and
+ the affected plugin sections in existing strongswan.conf files.
+
- The private/public key parsing and encoding has been split up into
separate pkcs1, pgp, pem and dnskey plugins. The public key implementation
plugins gmp, gcrypt and openssl can all make use of them.