-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 The Libreswan Project has issued a Release Candidate 1 for libreswan-5.0 This release is a major release with many features and bugfixes. We strongly encourage developers, system integrators, and distribution vendors to carefully test this release for any unexpected regressions. A list of major items for this release: * A new option to globally disable IKEv1 (enabled by default) * Combined Traffic Selectors within a single IPsec SA * Combined addresspool support (addresspool=v4/mask,v6/mask) * Nic Hardware Offload support (eg Nvidia/Mellanox ConnectX) * "ipsec auto --option" obsoleted for "ipsec option" (eg ipsec auto --up conn is now "ipsec up conn") (auto is still working for backwards compatibility) * XFRM interface IP management from pluto * nftables support (now the default over iptables) * Many bugfixes around restarting/reviving connections * Improved PFS/rekey compatibility * Drop prefix numbers from ipsec/whack command output * IKEv2 Labeled IPsec fixes (IKEv1 support removed) * Removal of _stackmanager * XFRM flushing moved from init system to pluto * cleanup of man pages * added various missing whack options * Internal SPD routing improvements For new configuration keywords and whack commands, please see: * man libreswan * man pluto * man ipsec whack You can download release candidates of libreswan via https at: https://download.libreswan.org/development/ The full changelog is available at: https://github.com/libreswan/libreswan/blob/main/CHANGES Please report bugs either via one of the mailinglists or at our bug tracker: https://lists.libreswan.org/ https://github.com/libreswan/libreswan/ -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEkH55DyXB6OVhzXO1hf9LQ7MPxvkFAmV7yksTHHRlYW1AbGli cmVzd2FuLm9yZwAKCRCF/0tDsw/G+TYWD/4vTHfxVcIm64MzSBXD/VG6us3H2mKB v4OWvAbaNozJKjUuqncRn8hkIsPCVqR8pdFhy6xeUGn5iCURof7tzeHmFKFDkUd+ R/TLFt2cLq01KLNXIQ0byv75K/Rwp+4PYWNTN1rTnUYHH5oyM+sFY6JPP/EL/U+o XlJj9LO/NKc1Hvi1ne0s/nQlfuf39+5Wtd59Au4GLi2aGS0fPq8pmvjCO0dUvEM8 x6L2u+DUlWaLlTNEzPflEk+owWEjiIq6esjRUSGszPKR186BfUwXS2I+AMBluzxr N8HkJaygOYJf3Rzx90L+YGBGNiBeWqf6rxQtrZiWWQUKipJe2pEgfPQ6RGQgwtbL 6cVgHxmopDsQZxYnZBIGb6KmekW1nt4trGfzZMmgcAZzaS7NdQdDwMKNvMHbSAIy MfF67QVT7qVL1WCM+4PHnWH5MmRy+X04ynYJM48hW8cAAJBcKqTrjDucG5iM1MRL GCa2i/4w9Yje3sFwfm1uCaNrtyveqAhj2pKEl4l6VnkNq2BywO41dAUbB//mpE/i lhsGou2rKzLAHN8KLxW0izPU38XwWbr9rjR9Fker+vMd83fRkdg9FUDB2T0IwqYw XlUoh+CA4aIpx32jkkSHdW0tZ3yzuhAiuq5w6m24szDrBzg+5RIQIvtOyB6PcOti lRMtr74TgqAtxA== =l2yY -----END PGP SIGNATURE----- _______________________________________________ Swan-announce mailing list swan-annou...@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-announce _______________________________________________ Swan-dev mailing list Swan-dev@lists.libreswan.org https://lists.libreswan.org/mailman/listinfo/swan-dev