[prev in list] [next in list] [prev in thread] [next in thread]
List: strongswan-users
Subject: [strongSwan] ANNOUNCE: strongswan-2.8.3 released
From: Andreas Steffen <andreas.steffen () strongswan ! org>
Date: 2007-02-22 10:28:10
Message-ID: 45DD703A.2090602 () strongswan ! org
[Download RAW message or body]
[Attachment #2 (multipart/signed)]
Hi,
the lastest 2.8.3 release is available from
http://www.strongswan.org/
We fixed a recently discovered bug in the computation of the
SHA-512-HMAC function used for IKE. We also added the SHA-384 hash
and HMAC functions and created a matching UML scenario:
http://www.strongswan.org/uml/testresults2/ike-alg-sha2_384/
In order to prevent such bugs in the future we now execute
automatic testvector-based self-tests of all hash functions
(MD5, SHA-1, SHA-2) during pluto startup. Currently only a warning
is issued in the case of a test failure but in a future release the
corresponding crypto functions will be automatically removed.
moon pluto[8086]: Testing registered IKE hash algorithms:
moon pluto[8086]: OAKLEY_MD5 hash self-test passed
moon pluto[8086]: OAKLEY_MD5 hmac self-test passed
moon pluto[8086]: OAKLEY_SHA hash self-test passed
moon pluto[8086]: OAKLEY_SHA hmac self-test passed
moon pluto[8086]: OAKLEY_SHA2_256 hash self-test passed
moon pluto[8086]: OAKLEY_SHA2_256 hmac self-test passed
moon pluto[8086]: OAKLEY_SHA2_384 hash self-test passed
moon pluto[8086]: OAKLEY_SHA2_384 hmac self-test passed
moon pluto[8086]: OAKLEY_SHA2_512 hash self-test passed
moon pluto[8086]: OAKLEY_SHA2_512 hmac self-test passed
moon pluto[8086]: All crypto self-tests passed
SHA-2 signatures are now supported in X.509 certificates. You can use
openssl-0.9.8 to generate these stronger certificates for use with
strongSwan. The following UML scenarios uses X.509 certificates with
a SHA-256, SHA-384, and SHA-512 signature.
http://www.strongswan.org/uml/testresults2/strong-certs/
Best regards
Andreas
======================================================================
Andreas Steffen andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution! www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==
["smime.p7s" (application/x-pkcs7-signature)]
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic