From: Andreas Steffen Date: Mon, 31 Jan 2011 04:37:41 +0000 (+0100) Subject: added tnccs_dynamic plugin and tnccs_11 refactoring to NEWS X-Git-Tag: 4.5.1~92 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5cdaafefc14a726c66413703af485fa05dc5f9af;p=thirdparty%2Fstrongswan.git added tnccs_dynamic plugin and tnccs_11 refactoring to NEWS --- diff --git a/NEWS b/NEWS index fbae771cbc..42af2d37f7 100644 --- a/NEWS +++ b/NEWS @@ -3,11 +3,19 @@ strongswan-4.5.1 - Sansar Choinyambuu implemented the RFC 5793 Posture Broker Protocol (BP) compatible with Trusted Network Connect (TNC). The TNCCS 2.0 protocol - requires the tnccs_20, tnc_imc and tnc_imv plugins but dose not depend + requires the tnccs_20, tnc_imc and tnc_imv plugins but does not depend on the libtnc library. Any available IMV/IMC pairs conforming to the Trusted Computing Group's TNC-IF-IMV/IMC 1.2 interface specification can be loaded via /etc/tnc_config. +- Re-implemented the TNCCS 1.1 protocol by using the tnc_imc and tnc_imv + in place of the external libtnc library. + +- The tnccs_dynamic plugin loaded on a TNC server in addition to the + tnccs_11 and tnccs_20 plugins, dynamically detects the IF-TNCCS + protocol version used by a TNC client and invokes an instance of + the corresponding protocol stack. + - IKE and ESP proposals can now be stored in an SQL database using a new proposals table. The start_action field in the child_configs tables allows the automatic starting or routing of connections stored @@ -64,6 +72,7 @@ strongswan-4.5.1 - The revocation and x509 libstrongswan plugins and the pki tool gained basic support for delta CRLs. + strongswan-4.5.0 ----------------