From: Martin Willi Date: Wed, 27 Jan 2010 15:08:06 +0000 (+0100) Subject: Updated NEWS about per-connection inactivity timeout X-Git-Tag: 4.3.6~24 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=909c0c3d63b1719862ddec1b0b718a4798a91cd6;p=thirdparty%2Fstrongswan.git Updated NEWS about per-connection inactivity timeout --- diff --git a/NEWS b/NEWS index e2b180adde..1ba8b7c496 100644 --- a/NEWS +++ b/NEWS @@ -12,9 +12,9 @@ strongswan-4.3.6 - The IKEv1 and IKEV2 daemons now check certificate path length constraints. -- The new strongswan.conf option "charon.inactivity_timeout" closes a CHILD_SA - if no traffic was sent or received within the given interval. To close the - complete IKE_SA if its only CHILD_SA was inactive, set +- The new ipsec.conf conn option "inactivity" closes a CHILD_SA if no traffic + was sent or received within the given interval. To close the complete IKE_SA + if its only CHILD_SA was inactive, set the global strongswan.conf option "charon.inactivity_close_ike" to yes. - More detailed IKEv2 EAP payload information in debug output