-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The Libreswan Project has released libreswan-3.31 This is a bugfix release. It fixes IKEv2 IPv4 rekeying that was broken in 3.30. It also adds support for XFRM interfaces to IKEv1 to help migration from KLIPS to XFRM, and an updown script fix for KLIPS. This release is meant to be the last one supporting both KLIPS and XFRM and can be used to test migration to XFRM. For a full changelog, see below changelog for details. You can download libreswan via https at: https://download.libreswan.org/libreswan-3.31.tar.gz https://download.libreswan.org/libreswan-3.31.tar.gz.asc The full changelog is available at: https://download.libreswan.org/CHANGES Please report bugs either via one of the mailinglists or at our bug tracker: https://lists.libreswan.org/ https://bugs.libreswan.org/ Binary packages for RHEL/CentOS can be found at: https://download.libreswan.org/binaries/ Binary packages for Fedora and Debian should be available in their respective repositories a few days after this release. See also https://libreswan.org/ v3.31 (March 3, 2020) * IKEv2: Opportunistic conns specifying keyingtries=0 are changed to 1 [Paul] * IKEv2: Fix ikev2 rekey failures due to bad Traffic Selector proposa [Antony] * IKEv2: Verify (not ignore) expected TSi/TSr payloads for IPsec rekeys [Paul] * IKEv1: Support for XFRMi interfaces [Paul] * pluto: Disable log_to_audit if kernel does not support audit [Paul] * addconn: Do not assert on ipsec-interface=no [Paul] * nat_traversal: Fix not to send nat-t keepalives when there is no nat [Tuomo] * KLIPS: Fix _updown.klips (regression introduced in 3.30) [Wolfgang] * pluto: Increase max IKEv2 fragments to 32 to support Windows [John Mah] -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEkH55DyXB6OVhzXO1hf9LQ7MPxvkFAl5f+E0THHRlYW1AbGli cmVzd2FuLm9yZwAKCRCF/0tDsw/G+b8iD/44M4hna7IxQgCC0t6S6xj4zu9gb7uT FD8zISjAnO9FpQ/zBnOe3U6tstJj+oNmBNYS+W0XhyszYTXVpxAn52OsAuTYTvvw 2Wwj+eBvAlpBL143rLMfJX+5bBHkybQ+9jccAprBMDA0o+Ijp3Cf6o4v8p56tGjW UlOzmU3jhc31vFYk8oKVg+FxBoexE9/TBdlEZhc9FvF/2FT0trQKepVs0/F8Gk17 mMzWojAj3BVj8QoOm2vYGYm8nf3Y72ASt+ugUJc9vM+8r1831KlMUBgLaXRO9hqC 3k+3s+06kLyiwdVwaDJBIcOqMRCo/CjOGg7RtYxvkkfK8WY0PKM2Fj2rtBH1b06k Hvr23ELozEtBVK2AiISUQskDKBDvIEfESY+O22U3gbwUZJIB64lQI03J0aJKt8B7 V91McIQa+2wZLDj0dHPORQMncgzveVTc33tHMJ7g1LIatJA9cp8XrI5WPrW1Z0w2 nOisgsSQ2OnysMgqJgZbPSvkT7ULDUqAS9jCQg8JBox7m3iqBeyVGxLkhHNiDfvE l0xhm7UQYwvMgA4A9aslntSH+/Hl5d1ZjwMZkbvlg4MV9BleNB106IfS2+auMjhq Hk/SO0ARHsxhmeGRNbfWJY2r2SY63M4Y6AwKXOYBbYQyRXb5kU+uQPzVyzCGxYkY Fz/WbKX175f11Q== =WQTa -----END PGP SIGNATURE----- _______________________________________________ Swan-announce mailing list swan-annou...@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-announce _______________________________________________ Swan-dev mailing list Swan-dev@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-dev