updated News for 0.8 branch
Yes: 0.8.0 is out !!!
Create ChangeLog for proper CVS branch.
Have privilege separation child process exit if the parent exits.
From Marcelo Leitner <mleitner@redhat.com>: do not shrink pfkey socket
buffers (if system default is larger than what we want as minimum)
fixed some crashes in LIST_FOREACH where current element could be removed during the loop
From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Fix one byte too
short memory allocation in isakmp_unity.c:splitnet_list_2str().
From Nakano Takaharu: Fix bignum memory allocation.
Allow inherited remote blocks without additional remote statements to be
specified in a simpler way. patch by Roman Hoog Antink <rha@open.ch>
From Wolfgang Schmieder <wolfgang.schmieder@honeywell.com>: setup phase1
port properly.
From Rainer Weikusat <rweikusat@mobileactivedefense.com>: Release unused
phase2 of passive remotes after acquire.
From Roman Hoog Antink <rha@open.ch>: do not print unnecessary warning
about non-verified certificate when using raw plain-rsa.
From Roman Hoog Antink <rha@open.ch>: add remote's IP address to the
"certificate not verified" error message.
From Roman Hoog Antink <rha@open.ch>: Accept DPD messages with cookies
also in reversed order for compatiblity. At least Cisco 836 running
IOS 12.3(8)T does this.
From Götz Babin-Ebell <g.babin-ebell@novamedia.de>:
Require OpenSSL 0.9.8s or higher
From Götz Babin-Ebell <g.babin-ebell@novamedia.de>: Smarter X.509 subject
name compare.
Don't derefence the directory symlink which we might be recreating.
Fix errors from automake 1.13
ipsec-tools-0.8.1
Fix handling of deletion notification.