Release Notes: Removal of netlink support for user-kernel comm, revision of Pluto's logging, new manpages for the /proc entries with KLIPS, and much more.
Release Notes: A nasty bug in which a corrupted sequence number in a packet could paralyze a connection, causing all subsequent packets to be rejected as "duplicate", has been fixed. In the absence of an existing /etc/ipsec.secrets, installation includes automatic generation of an RSA host key. Startup and shutdown are now quieter, with less blow-by-blow narrative from ipsec_setup. ipsec.conf include processing has been made much more efficient, as the first step in faster FreeS/WAN startup in large configurations. As usual, there are assorted small bug fixes and improvements to docs and messages.
Release Notes: A bug in virtual interfaces, a bug in ipsec_look, and secret-censoring have been fixed. Pluto now uses a separate "updown" script and now supports per-connection debugging flags. A new command, ipsec showdefaults, was added. Various small improvements were made to rsasigkey. The patcher has been modified. The internal ipsec.conf-reader utility and the text-to-address conversion routine now object to unprintable characters. The contents of /proc/net/ipsec_spi have changed. Inbound policy-checking code was added. KLIPS debug output was shortened. Support for 2.3.xx kernels has improved.
Release Notes: Full support for the 2.0.38 and 2.2.12 kernels, and preliminary 2.3.xx support.
Release Notes: This is the first stable release of the system.