[Swan] [Swan-announce] libreswan-4.4 released

[The Libreswan Team]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512


The Libreswan Project has released libreswan 4.4

This is a bugfix release. It includes improved connection switching,
fixes for IKEv2 Labeled IPsec and IPsec over TCP fixes.

This latest version of libreswan can be downloaded from:

https://download.libreswan.org/libreswan-4.4.tar.gz
https://download.libreswan.org/libreswan-4.4.tar.gz.asc

The full changelog is available at: https://download.libreswan.org/CHANGES

Please report bugs either via one of the mailinglists or at our github
bug tracker:

https://lists.libreswan.org/
https://github.com/libreswan/libreswan/issues

Binary packages for RHEL/CentOS can be found at:
https://download.libreswan.org/binaries/

Binary packages for Fedora and Debian should be available in their
respective repositories a few days after this release.

See also https://libreswan.org/

v4.4 (April 22, 2021)
* IKEv2: Fixes for TCP encap in Transport Mode and host-to-host [Paul/Sabrina]
* IKEv2: Fixes to Labeled IPsec policies [Kavinda Wewegama/Paul]
* IKEv2: Add redirect statistics to whack --globalstatus [Clive Zagno]
* IKEv2: Connections would not always switch when needed [Andrew/Paul]
* pluto: Fix for host-to-host connections use non-standard IKE ports [Paul]
* pluto: Use peer ID (IKEv2 IDr, IKEv1 Aggr) to select best initial conn [Paul]
* pluto: Disable interface-ip= as the feature is not yet implemented [Paul]
* pluto: Fix PLUTO_PEER_CLIENT* in updown for NAT + Transport Mode [Paul]
* pluto: Remove never updated PLUTO_VERSION for updown scripts [Paul]
* pluto: Actually set PLUTO_CONNECTION_TYPE= to transport or tunnel [Paul]
* pluto: Allow non-templated wildcard ID connections to match [Paul]
* pluto: Reduce and merge various logging messages [Andrew]
* libipsecconf: Do not allow vhost/vnet in IKEv2 connections [Paul]
* XFRM: Restarting pluto when using ipsec-interface= could fail [Paul]
* contrib/munin: Update plugin to use python3 and update doc header [Tuomo]
* testing: Enable OpenBSD interop tests [Paul/Ravi]
* testing: Make tests more reliable on KVM [Andrew]

-----BEGIN PGP SIGNATURE-----
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=SwaZ
-----END PGP SIGNATURE-----
_______________________________________________
Swan-announce mailing list
Swan-announce at lists.libreswan.org
https://lists.libreswan.org/mailman/listinfo/swan-announce