client/tripectl.c: New option `-W' to set `WATCH' list.

[tripe] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 0183dc0ad9cbcd2820580c98547c0311865e8e61..c0e9c86957521d88aab423c749f47afe4c13ff59 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,67 @@
+tripe (1.0.0pre16.2) experimental; urgency=low
+
+  * tripe-peer-services: `tripe-ifup' is now more tolerant of errors, and
+    more useful at reporting them.
+  * tripe-peer-services: `tripe-ifup' strips any explicit prefix length
+    from the remote internal address when adding routes naming it as a
+    gateway.
+  * tripe-peer-services: `tripe-ifup' explicitly forces the sysctl setting
+    `net.ipv6.conf.IFACE.disable_ipv6' off before configuring an IPv6
+    address as a workaround for some devices which try to turn IPv6 off
+    globally if they can't get a route.
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Sat, 14 Mar 2015 19:35:18 +0000
+
+tripe (1.0.0pre16.1) experimental; urgency=low
+
+  * tripe: Diagnose a mismatch between two peers' choice of bulk crypto
+    transforms.
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Tue, 17 Feb 2015 21:33:47 +0000
+
+tripe (1.0.0pre16) experimental; urgency=low
+
+  * pathmtu: Use `IP_PMTUDISC_PROBE' rather than `..._DO' when doing
+    Linux-specific probing: this prevents inexplicable `EMSGSIZE' failures
+    from write(2).
+  * tripe: New bulk-crypto transform `iiv', which (a) reduces encryption
+    overhead and (b) is fully deterministic, closing a possible
+    kleptographic channel.
+  * tripe: Improve logging options in the client and startup scripts.
+  * tripe: Ship experimental systemd units as examples.
+  * tripe-peer-services: `conntrack' supports newer GLib bindings.
+  * tripe-peer-services: `connect' now only polls its database once a minute
+    (rather than once a second).
+  * tripemon: Support for newer Gtk bindings.
+  * tripemon: More distinctive highlighting of entry fields with invalid
+    contents.
+  * tripemon: Show per-peer crypto details in info sheet.
+  * tripemon: Support new options in `Add peer' dialogue.
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Sun, 20 Jul 2014 21:48:23 +0100
+
+tripe (1.0.0pre15) experimental; urgency=low
+
+  * Allow network masks in the `laddr' and `raddr' lists.
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Sat, 19 Apr 2014 14:34:22 +0100
+
+tripe (1.0.0pre14) experimental; urgency=low
+
+  * Abolish the `watch' service.  Its functionality has been absorbed into
+    `connect', and the postinst script now attempts to remove the obsolete
+    symbolic link from /etc/tripe/services.
+  * Many internal build changes.
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Tue, 28 Jan 2014 15:39:24 +0000
+
+tripe (1.0.0pre13) experimental; urgency=low
+
+  * Compare MAC tags in constant time.  (Fixes a timing attack performed
+    by an adversary who can watch the timestamp on the server log.)
+
+ -- Mark Wooding <mdw@distorted.org.uk>  Mon, 27 May 2013 22:58:31 +0100
+
 tripe (1.0.0pre12.2) experimental; urgency=low
 
   * New `tripe-keys' command: `check' reports on keys which will expire