[Swan-dev] [Swan-announce] libreswan-3.31 released

[The Libreswan Team]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


The Libreswan Project has released libreswan-3.31

This is a bugfix release. It fixes IKEv2 IPv4 rekeying that
was broken in 3.30. It also adds support for XFRM interfaces
to IKEv1 to help migration from KLIPS to XFRM, and an updown
script fix for KLIPS. This release is meant to be the last
one supporting both KLIPS and XFRM and can be used to test
migration to XFRM.

For a full changelog, see below changelog for details.


You can download libreswan via https at:

https://download.libreswan.org/libreswan-3.31.tar.gz
https://download.libreswan.org/libreswan-3.31.tar.gz.asc

The full changelog is available at: https://download.libreswan.org/CHANGES

Please report bugs either via one of the mailinglists or at our bug
tracker:

https://lists.libreswan.org/
https://bugs.libreswan.org/

Binary packages for RHEL/CentOS can be found at:
https://download.libreswan.org/binaries/

Binary packages for Fedora and Debian should be available in their
respective repositories a few days after this release.

See also https://libreswan.org/

v3.31 (March 3, 2020)
* IKEv2: Opportunistic conns specifying keyingtries=0 are changed to 1 [Paul]
* IKEv2: Fix ikev2 rekey failures due to bad Traffic Selector proposa [Antony]
* IKEv2: Verify (not ignore) expected TSi/TSr payloads for IPsec rekeys [Paul]
* IKEv1: Support for XFRMi interfaces [Paul]
* pluto: Disable log_to_audit if kernel does not support audit [Paul]
* addconn: Do not assert on ipsec-interface=no [Paul]
* nat_traversal: Fix not to send nat-t keepalives when there is no nat [Tuomo]
* KLIPS: Fix _updown.klips (regression introduced in 3.30) [Wolfgang]
* pluto: Increase max IKEv2 fragments to 32 to support Windows [John Mah]
-----BEGIN PGP SIGNATURE-----
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=WQTa
-----END PGP SIGNATURE-----
_______________________________________________
Swan-announce mailing list
Swan-announce at lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-announce