Commit | Line | Data |
---|---|---|
8886c0f9 MW |
1 | tripe (1.0.0pre15) experimental; urgency=low |
2 | ||
3 | * Allow network masks in the `laddr' and `raddr' lists. | |
4 | ||
5 | -- Mark Wooding <mdw@distorted.org.uk> Sat, 19 Apr 2014 14:34:22 +0100 | |
6 | ||
cf035d96 MW |
7 | tripe (1.0.0pre14) experimental; urgency=low |
8 | ||
9 | * Abolish the `watch' service. Its functionality has been absorbed into | |
10 | `connect', and the postinst script now attempts to remove the obsolete | |
11 | symbolic link from /etc/tripe/services. | |
12 | * Many internal build changes. | |
13 | ||
14 | -- Mark Wooding <mdw@distorted.org.uk> Tue, 28 Jan 2014 15:39:24 +0000 | |
15 | ||
04ed79b8 MW |
16 | tripe (1.0.0pre13) experimental; urgency=low |
17 | ||
18 | * Compare MAC tags in constant time. (Fixes a timing attack performed | |
19 | by an adversary who can watch the timestamp on the server log.) | |
20 | ||
21 | -- Mark Wooding <mdw@distorted.org.uk> Mon, 27 May 2013 22:58:31 +0100 | |
22 | ||
c2f28e4b MW |
23 | tripe (1.0.0pre12.2) experimental; urgency=low |
24 | ||
25 | * New `tripe-keys' command: `check' reports on keys which will expire | |
26 | soon, so that someone remembers to refresh them. | |
27 | ||
28 | -- Mark Wooding <mdw@distorted.org.uk> Thu, 07 Feb 2013 10:37:01 +0000 | |
29 | ||
b2a72eca MW |
30 | tripe (1.0.0pre12.1) experimental; urgency=low |
31 | ||
32 | * Extract Wireshark version number from `wireshark-common' rather than | |
33 | `wireshark': the latter need not be installed. | |
34 | ||
35 | -- Mark Wooding <mdw@distorted.org.uk> Sat, 12 Jan 2013 22:30:32 +0000 | |
36 | ||
d3731285 MW |
37 | tripe (1.0.0pre12) experimental; urgency=low |
38 | ||
39 | * tripe-peer-services: Add machinery for notifying a peer that we no | |
40 | longer require its services. | |
41 | ||
42 | -- Mark Wooding <mdw@distorted.org.uk> Sat, 05 Jan 2013 07:50:33 +0000 | |
43 | ||
791a8698 MW |
44 | tripe (1.0.0pre11.1) experimental; urgency=low |
45 | ||
46 | * tripe: Fix segfault from PEERINFO command. | |
47 | * tripe: Include missing documentation of ADD command's `-priv' option. | |
48 | * tripe: Fix warning message which didn't match documentation. | |
49 | ||
50 | -- Mark Wooding <mdw@distorted.org.uk> Sat, 15 Dec 2012 14:14:36 +0000 | |
51 | ||
87c06f6b | 52 | tripe (1.0.0pre11) experimental; urgency=low |
1a372224 MW |
53 | |
54 | * Fix log/permissions foul-up. Move the logs to /var/log/tripe, and | |
55 | arrange for that directory to exist with the correct permissions. | |
56 | Don't try to open the log until after dropping privileges, so as to | |
57 | provide a check that we can reopen them later. | |
8743c776 MW |
58 | * New peer option `mobile' can be set in peers.d files to indicate that |
59 | the peer's IP address and/or port are highly volatile and the server | |
60 | should try to keep up with changes by attempting to decrypt incoming | |
61 | packets using any available mobile keys. | |
87c06f6b MW |
62 | * tripe: Mobile peers: track changes in remote address automatically. |
63 | * pathmtu: New mode uses raw sockets for portability. | |
64 | * tripe-peer-services: Support IPv6 interface configuration. (There's | |
65 | still no support for sending encrypted packets over IPv6.) | |
66 | * tripe: Randomize exponential backoff for retransmission. [mdw/backoff] | |
67 | * tripe: Support multiple private keys and cipher suites in the same | |
68 | server. | |
1a372224 | 69 | |
87c06f6b | 70 | -- Mark Wooding <mdw@distorted.org.uk> Tue, 18 Sep 2012 03:39:52 +0100 |
1a372224 | 71 | |
550edef7 MW |
72 | tripe (1.0.0pre10) experimental; urgency=low |
73 | ||
74 | * Overhaul SLIP error handling. | |
75 | * Have conntrack tear VPN down in some networks. | |
76 | ||
77 | -- Mark Wooding <mdw@distorted.org.uk> Fri, 22 Apr 2011 16:48:31 +0100 | |
78 | ||
29b6a378 MW |
79 | tripe (1.0.0pre9) experimental; urgency=low |
80 | ||
81 | * Make conntrack rather more robust against errors. | |
82 | * Logically separate key tags from peer names. | |
83 | ||
84 | -- Mark Wooding <mdw@distorted.org.uk> Mon, 17 May 2010 20:27:33 +0100 | |
85 | ||
642bde67 MW |
86 | tripe (1.0.0pre8.1) experimental; urgency=low |
87 | ||
88 | * Whoops. conntrack was almost completely broken. Fix it a lot. | |
89 | ||
90 | -- Mark Wooding <mdw@distorted.org.uk> Sat, 15 May 2010 20:06:12 +0100 | |
91 | ||
06007586 MW |
92 | tripe (1.0.0pre8) experimental; urgency=low |
93 | ||
94 | * Many changes, enhancements and bug fixes. Like, way too many to list | |
95 | here. | |
96 | ||
97 | -- Mark Wooding <mdw@distorted.org.uk> Sun, 09 May 2010 15:32:30 +0100 | |
98 | ||
d36eda2a | 99 | tripe (1.0.0pre7) experimental; urgency=low |
100 | ||
101 | * Support SLIP encapsulation. | |
102 | ||
82c75bd9 | 103 | -- Mark Wooding <mdw@distorted.org.uk> Sun, 4 Sep 2005 00:52:56 +0100 |
d36eda2a | 104 | |
ef4a1ab7 | 105 | tripe (1.0.0pre6) experimental; urgency=low |
106 | ||
107 | * Debianization! | |
52c03a2a | 108 | * Don't report uninteresting errors when accepting connections. |
109 | * Support elliptic curve keys. | |
c55f55af | 110 | * Allow user selection of symmetric crypto algorithms. |
ef4a1ab7 | 111 | |
c55f55af | 112 | -- Mark Wooding <mdw@nsict.org> Mon, 19 Apr 2004 08:44:00 +0100 |