From 77e89bdcdca702e23bc39e6f349863c37859ab5b Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Tue, 3 Mar 2026 14:58:16 +0100 Subject: [PATCH] NEWS: Add news for 6.0.5 --- NEWS | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/NEWS b/NEWS index c61acfcd0..452971cf5 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,30 @@ +strongswan-6.0.5 +---------------- + +- Added support for forwarding certain ICMP errors even if their source address + doesn't match the traffic selectors, when running on Linux 6.9+. + +- The dhcp plugin now tracks leases across make-before-break reauthentications. + +- charon-cmd support childless IKE SA initiation and IKEv2 PSK authentication. + +- The kernel-netlink plugin now doesn't default to the peer's address as next + hop when installing routes if at least an interface was found. + +- organizationIdentifier RDNs are supported when parsing ASN.1 DN identities + from strings. + +- Options shared by all commands in the swanctl and pki tools (e.g. --debug) are + now parsed even if passed before the command. The log level is now always + changed before initializing the libraries and plugins. And due to conflicts, + the short options for swanctl's `--version` and `--uninstall` commands were + changed to `-V` and `-U`, respectively. Similarly, the short option for pki's + `--verify` command is now `-V`. + +- For distributions that package plugins separately a new configure option is + provided to change the log message if a plugin can't be loaded. + + strongswan-6.0.4 ----------------