-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
The Libreswan Project has issued a Release Candidate 2 for libreswan-5.0 This release is a major release with many features and bugfixes. We strongly encourage developers, system integrators, and distribution vendors to carefully test this release for any unexpected regressions. A list of major items for this release: * A new option to globally disable IKEv1 (enabled by default) * Combined Traffic Selectors within a single IPsec SA * Combined addresspool support (addresspool=v4/mask,v6/mask) * Nic Hardware Offload support (eg Nvidia/Mellanox ConnectX) * "ipsec auto --option" obsoleted for "ipsec option" (eg ipsec auto --up conn is now "ipsec up conn") (auto is still working for backwards compatibility) * XFRM interface IP management from pluto * nftables support (now the default over iptables) * Many bugfixes around restarting/reviving connections * Improved PFS/rekey compatibility * Drop prefix numbers from ipsec/whack command output * IKEv2 Labeled IPsec fixes (IKEv1 support removed) * Removal of _stackmanager * XFRM flushing moved from init system to pluto * cleanup of man pages * added various missing whack options * Internal SPD routing improvements For new configuration keywords and whack commands, please see: * man libreswan * man pluto * man ipsec whack You can download release candidates of libreswan via https at: https://download.libreswan.org/development/ The full changelog is available at: https://github.com/libreswan/libreswan/blob/main/CHANGES Please report bugs either via one of the mailinglists or at our bug tracker: https://lists.libreswan.org/ https://github.com/libreswan/libreswan/ -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEEkH55DyXB6OVhzXO1hf9LQ7MPxvkFAmXvfwETHHRlYW1AbGli cmVzd2FuLm9yZwAKCRCF/0tDsw/G+RDdD/4lif+bZJsijg16JEqdHh9lBD/pjZGa 5G4R+T35AL8JLK00IbsAKCrc2WPgIq9e2twRqAOmUKilLdgAxnuNtgzIJo6hIe8W qBv2eJMKn8I2yxGnZ+De9GkXyaauouRT3uvX1avE24oD/gxsFYzL4XGwEV57xjc3 IJx319soqRD+ErlpTURtz3V+fWvhIus95eSTk2uR7tPKmuTB4UcqGCRH/nnF1tR6 td215y+Vx5oAbJkhtXvbRtZ7DKE7QiPFGF7txthB0rcn/YJdHsIUlQuZbPYXmW/l fwsHwF8BkBcRHWa7Sfp44ydtCFyZ4Hfgt6ga6bQTZmHzlORd82ztUxDUZjYBU4z4 H5IsGdE8pTRTSEoZCLnbXTv2uwuHFicStAcn6/KLA7hIi0Kiz5GdRqLcLa8iqjTV ms8uNMItuq+Vw/5FRJFJPZHoww+/N6HFH+ikaNqldvlEvGQY7fvVqvHgOeDAe47c kcaxAziRuefM6wka7p0UxK15/XFaMO5PZCtTvPJtYsFO66c+0uBc7glP81lkYB61 i1+S0GoqmO9w1pzhDaadVnVdWTbXkAM+xNfoyKqwYWLM06v5f8r9VA6qY1Ftm+Y7 hB7izUe7BY727VLymk2vySlfBuw7HaBdyUxDCTmqG72YBc2KYhXh4+RCSfw/138U IAIhH+d7FthPNA== =M7xs -----END PGP SIGNATURE----- _______________________________________________ Swan-announce mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-announce _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
