Merge pull request #123254 from rnhmjoj/ipsec

libreswan: 3.2 -> 4.4
2021-05-19 13:36:04 +02:00
parent 7013a0f279 1e05d6d67f
commit 376eabdac3
5 changed files with 330 additions and 103 deletions
@@ -100,6 +100,19 @@
      Now nginx uses the zlib-ng library by default.
    </para>
   </listitem>
+   <listitem>
+    <para>
+     <link xlink:href="https://libreswan.org/">Libreswan</link> has been updated
+     to version 4.4. The package now includes example configurations and manual
+     pages by default. The NixOS module has been changed to use the upstream
+     systemd units and write the configuration in the <literal>/etc/ipsec.d/
+     </literal> directory. In addition, two new options have been added to
+     specify connection policies
+     (<xref linkend="opt-services.libreswan.policies"/>)
+     and disable send/receive redirects
+     (<xref linkend="opt-services.libreswan.disableRedirects"/>).
+    </para>
+   </listitem>
  </itemizedlist>
 </section>