Changeset 4644

Show
Ignore:
Timestamp:
11/13/08 06:46:51 (2 months ago)
Author:
andreas
Message:

added MIPv6 functionality to NEWS

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/NEWS

    r4626 r4644  
    22---------------- 
    33 
    4 - Flexible configuration of logging subsystem to different syslog facilities 
    5   or files using fine-grained log levels for each target. 
     4- Flexible configuration of logging subsystem allowing to log to multiple 
     5  syslog facilities or to files using fine-grained log levels for each target. 
    66 
    77- Load testing plugin to do stress testing of the IKEv2 daemon against self 
    …… 
    1414  parallelization to multiple cores. 
    1515 
    16 - updown script invocation has been separated in an own plugin to further 
    17   slim down the daemon core. 
    18  
    19 - separated IKE_SA/CHILD_SA key derivation process into a closed system, 
     16- updown script invocation has been separated into a plugin of its own to 
     17  further slim down the daemon core. 
     18 
     19- Separated IKE_SA/CHILD_SA key derivation process into a closed system, 
    2020  allowing future implementations to use a secured environment in e.g. kernel 
    2121  memory or hardware. 
    2222 
    23 - The kernel interface of charon has been modularized. Plugins for the native 
    24   IPsec stack of the Linux 2.6 kernel and the KLIPS IPsec stack are provided. 
     23- The kernel interface of charon has been modularized. XFRM NETLINK (default) 
     24  and PFKEY (--enable-kernel-pfkey) interface plugins for the native IPsec 
     25  stack of the Linux 2.6 kernel as well as a PFKEY interface for the KLIPS 
     26  IPsec stack (--enable-kernel-klips) are provided. 
     27 
     28- Basic Mobile IPv6 support has been introduced, securing Binding Update 
     29  messages as well as tunneled traffic between Mobile Node and Home Agent. 
     30  The installpolicy=no option allows peaceful cooperation with a dominant 
     31  mip6d daemon and the new type=transport_proxy implements the special MIPv6 
     32  IPsec transport proxy mode where the IKEv2 daemon uses the Care-of-Address 
     33  but the IPsec SA is set up for the Home Adress. 
    2534 
    2635