[Swan-announce] libreswan-5.0rc1 Release Candidate 1 released

[The Libreswan Team]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


The Libreswan Project has issued a Release Candidate 1 for libreswan-5.0

This release is a major release with many features and bugfixes. We
strongly encourage developers, system integrators, and distribution
vendors to carefully test this release for any unexpected regressions.

A list of major items for this release:

* A new option to globally disable IKEv1 (enabled by default)
* Combined Traffic Selectors within a single IPsec SA
* Combined addresspool support (addresspool=v4/mask,v6/mask)
* Nic Hardware Offload support (eg Nvidia/Mellanox ConnectX)
* "ipsec auto --option" obsoleted for "ipsec option"
   (eg ipsec auto --up conn is now "ipsec up conn")
   (auto is still working for backwards compatibility)
* XFRM interface IP management from pluto
* nftables support (now the default over iptables)
* Many bugfixes around restarting/reviving connections
* Improved PFS/rekey compatibility
* Drop prefix numbers from ipsec/whack command output
* IKEv2 Labeled IPsec fixes (IKEv1 support removed)
* Removal of _stackmanager
* XFRM flushing moved from init system to pluto
* cleanup of man pages
* added various missing whack options
* Internal SPD routing improvements

For new configuration keywords and whack commands, please see:
* man libreswan
* man pluto
* man ipsec whack

You can download release candidates of libreswan via https at:

https://download.libreswan.org/development/

The full changelog is available at:
https://github.com/libreswan/libreswan/blob/main/CHANGES

Please report bugs either via one of the mailinglists or at our bug
tracker:

https://lists.libreswan.org/
https://github.com/libreswan/libreswan/

-----BEGIN PGP SIGNATURE-----
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=l2yY
-----END PGP SIGNATURE-----