From fdc7c943f938cffab9f1249b24d1eedd419a2c96 Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Thu, 13 Dec 2007 17:52:49 +0000 Subject: [PATCH] updated NEWS --- NEWS | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/NEWS b/NEWS index 531ddb3..37a70e5 100644 --- a/NEWS +++ b/NEWS @@ -4,6 +4,19 @@ strongswan-4.1.10 - Fixed error in the ordering of the certinfo_t records in the ocsp cache that caused multiple entries of the same serial number to be created. +- Implementation of a simple EAP-MD5 module which provides CHAP + authentication. This may be interesting in conjunction with certificate + based server authentication, as weak passwords can't be brute forced + (in contradiction to traditional IKEv2 PSK). + +- A complete software based implementation of EAP-AKA, using algorithms + specified in 3GPP2 (S.S0055). This implementation does not use an USIM, + but reads the secrets from ipsec.secrets. Make sure to read eap_aka.h + before using it. + +- Support for vendor specific EAP methods using Expanded EAP types. The + interface to EAP modules has been slightly changed, so make sure to + check the changes if you're already rolling your own modules. strongswan-4.1.9 ---------------- -- 2.7.4