From ae2f35131d8d4481c67abcebbe406c04c02da93da1304b3742a19568797cb0f1 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Sat, 30 Jul 2022 09:44:05 +0000 Subject: [PATCH] heed changelog syntax requirements OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=137 --- strongswan.changes | 27 +++++++++++++++++---------- 1 file changed, 17 insertions(+), 10 deletions(-) diff --git a/strongswan.changes b/strongswan.changes index f0aedfa..48585e6 100644 --- a/strongswan.changes +++ b/strongswan.changes @@ -2,16 +2,23 @@ Sat Jul 30 06:48:29 UTC 2022 - Peter Conrad - Update to release 5.9.7 - * The IKEv2 key derivation is now delayed until the keys are actually needed to process or send the next message. - * Inbound IKEv2 messages, in particular requests, are now processed differently. - * The retransmission logic in the dhcp plugin has been fixed (#1154). - * The connmark plugin now considers configured masks in installed firewall rules (#1087). - * Child config selection has been fixed as responder in cases where multiple children use transport mode traffic selectors (#1143). - * The outbound SA/policy is now also removed after IKEv1 CHILD_SA rekeyings (#1041). - * The openssl plugin supports AES and Camellia in CTR mode (112bb46). - * The AES-XCBC/CMAC PRFs are demoted in the default proposal (after HMAC-based PRFs) since they were never widely adopted - * The kdf plugin is now automatically enabled if any of the aesni, cmac or xcbc plugins are enabled, or if none of the plugins that directly provide HMAC-based KDFs are enabled (botan, openssl or wolfssl). - * The CALLBACK macros (and some other issues) have been fixed when compiling with GCC 12 (#1053). + * The IKEv2 key derivation is now delayed until the keys are + actually needed to process or send the next message. + * Inbound IKEv2 messages, in particular requests, are now + processed differently. + * The retransmission logic in the dhcp plugin has been fixed. + * The connmark plugin now considers configured masks in + installed firewall rules. + * Child config selection has been fixed as responder in cases + where multiple children use transport mode traffic selectors. + * The outbound SA/policy is now also removed after IKEv1 + CHILD_SA rekeyings. + * The openssl plugin supports AES and Camellia in CTR mode. + * The AES-XCBC/CMAC PRFs are demoted in the default proposal + (after HMAC-based PRFs) since they were never widely adopted. + * The kdf plugin is now automatically enabled if any of the + aesni, cmac or xcbc plugins are enabled, or if none of the + plugins that directly provide HMAC-based KDFs are enabled. ------------------------------------------------------------------- Sat Apr 30 08:21:29 UTC 2022 - Jan Engelhardt