Changelog for libreswan-3.12-5.el7.i686.rpm :
Tue Jan 20 13:00:00 2015 Paul Wouters - 3.12-5
- Resolves: rhbz#826264 aes-gcm implementation support (for IKEv2)
- Resolves: rhbz#1074018 Audit key agreement (integ gcm fixup)

Tue Dec 30 13:00:00 2014 Paul Wouters - 3.12-4
- Resolves: rhbz#1134297 aes-ctr cipher is not supported
- Resolves: rhbz#1131503 non-zero rSPI on INVALID_KE (and proper INVALID_KE handling)

Thu Dec 4 13:00:00 2014 Paul Wouters - 3.12-2
- Resolves: rhbz#1105171 (Update man page entry)
- Resolves: rhbz#1144120 (Update for ESP CAMELLIA with IKEv2)
- Resolves: rhbz#1074018 Audit key agreement

Fri Nov 7 13:00:00 2014 Paul Wouters - 3.12-1
- Resolves: rhbz#1136124 rebase to libreswan 3.12
- Resolves: rhbz#1052811 [TAHI] (also clear reserved flags for isakmp_sa header)
- Resolves: rhbz#1157379 [TAHI][IKEv2] IKEv2.EN.R.1.3.3.1: Non RESERVED fields in INFORMATIONAL request

Mon Oct 27 13:00:00 2014 Paul Wouters - 3.11-2
- Resolves: rhbz#1136124 rebase to libreswan 3.11 (coverity fixup, dpdaction=clear fix)

Wed Oct 22 14:00:00 2014 Paul Wouters - 3.11-1
- Resolves: rhbz#1136124 rebase to libreswan 3.11
- Resolves: rhbz#1099905 ikev2 delete payloads are not delivered to peer
- Resolves: rhbz#1147693 NetworkManger-libreswan can not connect to Red Hat IPSec Xauth VPN
- Resolves: rhbz#1055865 [TAHI][IKEv2] libreswan do not ignore the content of version bit
- Resolves: rhbz#1146106 Pluto crashes after start when some ah algorithms are used
- Resolves: rhbz#1108256 addconn compatibility with openswan
- Resolves: rhbz#1152625 [TAHI][IKEv2] IKEv2.EN.I.1.1.6.2 Part D: Integrity Algorithm AUTH_AES_XCBC_96 fail
- Resolves: rhbz#1119704 [TAHI][IKEv2]IKEv2Interop.1.13a test fail
- Resolves: rhbz#1100261 libreswan does not send response when when it receives Delete Payload for a CHILD_SA
- Resolves: rhbz#1100239 ikev2 IKE SA responder does not send delete request to IKE SA initiator
- Resolves: rhbz#1052811 [TAHI][IKEv2]IKEv2.EN.I.1.1.11.1: Non zero RESERVED fields in IKE_SA_INIT response
- Resolves: rhbz#1126868 ikev2 sequence numbers are implemented incorrectly
- Resolves: rhbz#1145245 Libreswan appears to start with systemd before all the NICs are up and running.
- Resolves: rhbz#1145231 libreswan 3.10 upgrade breaks old ipsec.secrets configs
- Resolves: rhbz#1144123 Add ESP support for AES_XCBC hash for USGv6 and IPsec-v3 compliance
- Resolves: rhbz#1144120 Add ESP support for CAMELLIA for USGv6 and IPsec-v3 compliance
- Resolves: rhbz#1099877 Missing man-pages ipsec_whack, ipsec_manual
- Resolves: rhbz#1100255 libreswan Ikev2 implementation does not send an INFORMATIONAL response when it receives an INFORMATIONAL request with a Delete Payload for an IKE_SA

Tue Sep 9 14:00:00 2014 Paul Wouters - 3.10-3
- Resolves: rhbz#1136124 rebase to 3.10 (auto=route bug on startup)

Mon Sep 8 14:00:00 2014 Paul Wouters - 3.10-2
- Resolves: rhbz#1136124 rebase to libreswan 3.10

Mon Jul 14 14:00:00 2014 Paul Wouters - 3.8-6
- Resolves: rhbz#1092047 pluto cannot write to directories not owned by root

Thu Apr 10 14:00:00 2014 Paul Wouters - 3.8-5
- Resolves: rhbz#1052834 create_child_sa message ID handling

Tue Mar 18 13:00:00 2014 Paul Wouters - 3.8-4
- Resolves: rhbz#1052834 create_child_sa response

Wed Mar 5 13:00:00 2014 Paul Wouters - 3.8-3
- Resolves: rhbz#1069024 erroneous debug line with mixture [...]
- Resolves: rhbz#1030939 update nss/x509 documents, don\'t load acerts
- Resolves: rhbz#1058813 newhostkey returns zero value when it fails

Fri Jan 24 13:00:00 2014 Daniel Mach - 3.8-2
- Mass rebuild 2014-01-24

Thu Jan 16 13:00:00 2014 Paul Wouters - 3.8-1
- Resolves: rhbz#CVE-2013-6467
- Resolves: rhbz#1043642 rebase to version 3.8
- Resolves: rhbz#1029912 ipsec force-reload doesn\'t work
- Resolves: rhbz#826261 Implement SHA384/512 support for Openswan
- Resolves: rhbz#1039655 ipsec newhostkey generates false configuration

Fri Dec 27 13:00:00 2013 Daniel Mach - 3.6-3
- Mass rebuild 2013-12-27

Fri Nov 8 13:00:00 2013 Paul Wouters - 3.6-2
- Fix race condition in post for creating nss db

Thu Oct 31 13:00:00 2013 Paul Wouters - 3.6-1
- Updated to version 3.6 (IKEv2, MODECFG, Cisco interop fixes)
- Generate empty NSS db if none exists
- FIPS update using /etc/system-fips
- Provide: openswan-doc

Fri Aug 9 14:00:00 2013 Paul Wouters - 3.5-2
- rebuilt and bumped EVR to avoid confusion of import->delete->import
- require iproute

Mon Jul 15 14:00:00 2013 Paul Wouters - 3.5-1
- Initial package for RHEL7
- Added interop patch for (some?) Cisco VPN clients sending 16 zero
bytes of extraneous IKE data
- Removed fipscheck_version