X-Git-Url: https://tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=NEWS;h=abd6a6fb2e9f9da485c0a9df6ac26444bf17b8a5;hp=3dea2b51b85b1ca911d2ae5f5bc63474461e9194;hb=0c7e0210d900185d4c1a9ffd969dc2a26d9523a9;hpb=5b7f42bca4dbfee7a5fa2bc119f4739baaeb2f55 diff --git a/NEWS b/NEWS index 3dea2b51..abd6a6fb 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,164 @@ +Version 1.1pre11 December 27 2014 + + * Added a "network" command to list or switch networks. + + * Switched to Ed25519 keys and the ChaCha-Poly1305 cipher for the new protocol. + + * AutoConnect is now a boolean option, when enabled tinc always tries to keep + at least three meta-connections open. + + * The new protocol now uses UDP much more often. + + * Tinc "del" and "get" commands now return a non-zero exit code when they + don't find the requested variable. + + * Updated documentation. + + * Added a "DeviceStandby" option to defer running tinc-up until a working + connection is made, and which on Windows will also change the network + interface link status accordingly. + + * Tinc now tells the resolver to reload /etc/resolv.conf when it receives + SIGALRM. + + * Improved error messages and event loop handling on Windows. + + * LocalDiscovery now uses local address learned from other nodes, and is + enabled by default. + + * Added a "BroadcastSubnet" option to change the behavior of broadcast packets + in router mode. + + * Added support for dotted quad notation in IPv6 (e.g. ::1.2.3.4). + + * Improved format of printed Subnets, MAC and IPv6 addresses. + + * Added a "--batch" option to force the tinc CLI to run in non-interactive + mode. + + * Improve default Device selection on *BSD and Mac OS X. + + * Allow running tinc without RSA keys. + +Thanks to Etienne Dechamps, Sven-Haegar Koch, William A. Kennington III, +Baptiste Jonglez, Alexis Hildebrandt, Armin Fisslthaler, Franz Pletz, Alexander +Ried and Saverio Proto for their contributions to this version of tinc. + +Version 1.1pre10 February 7 2014 + + * Added a benchmark tool (sptps_speed) for the new protocol. + + * Fixed a crash when using Name = $HOST while $HOST is not set. + + * Use AES-256-GCM for the new protocol. + + * Updated support for Solaris. + + * Allow running tincd without a private ECDSA key present when + ExperimentalProtocol is not explicitly set. + + * Enable various compiler hardening flags by default. + + * Added support for a "conf.d" configuration directory. + + * Fix tinc-gui on Windows, also allowing it to connect to a 32-bits tincd when + tinc-gui is run in a 64-bits Python environment. + + * Added a "ListenAddress" option, which like BindToAddress adds more listening + address/ports, but doesn't bind to them for outgoing sockets. + + * Make invitations work better when the "invite" and "join" commands are not + run interactively. + + * When creating meta-connections to a node for which no Address statement is + specified, try to use addresses learned from other nodes. + +Thanks to Dennis Joachimsthaler and Florent Clairambault for their contribution +to this version of tinc. + +Version 1.1pre9 September 8 2013 + + * The UNIX socket is now created before tinc-up is called. + + * Windows users can now use any extension that is in %PATHEXT% for scripts, + not only .bat. + + * Outgoing sockets are bound to the address of the listening sockets again, + when there is no ambiguity. + + * Added invitation-created and invitation-accepted scripts. + + * Invited nodes now learn of the Mode and Broadcast settings of the VPN. + + * Joining a VPN with an invitation now also works on Windows. + + * The port number tincd is listening on is now always included in the + invitation URL. + + * A running tincd is now correctly informed when a new invitation has been + generated. + + * Several bug fixes for the new protocol. + + * Added a test suite. + +Thanks to Etienne Dechamps for his contribution to this version of tinc. + +Version 1.1pre8 August 13 2013 + + * ExperimentalProtocol is now enabled by default. + + * Added an invitation protocol that makes it easy to invite new nodes. + + * Added the LocalDiscoveryAddress option to change the broadcast address used + to find local nodes. + + * Limit the rate of incoming meta-connections. + + * Many small bug fixes and code cleanups. + +Thanks to Etienne Dechamps and Sven-Haegar Koch for their contributions to this +version of tinc. + +Version 1.1pre7 April 22 2013 + + * Fixed large latencies on Windows. + + * Renamed the tincctl tool to tinc. + + * Simplified changing the configuration using the tinc tool. + + * Added a full description of the ExperimentalProtocol to the manual. + + * Drop packets forwarded via TCP if they are too big (CVE-2013-1428). + +Thanks to Martin Schobert for auditing tinc and reporting the vulnerability. + +Version 1.1pre6 February 20 2013 + + * Fixed tincd exitting immediately on Windows. + + * Detect PMTU increases. + + * Fixed crashes when using a SOCKS5 proxy. + + * Fixed control connection when using a proxy. + +Version 1.1pre5 January 20 2013 + + * Fixed long delays and possible hangs on Windows. + + * Fixed support for the tunemu device on iOS, the UML and VDE devices. + + * Small improvements to the documentation and error messages. + + * Fixed broadcast packets not reaching the whole VPN. + + * Tincctl now connects via a UNIX socket to the tincd on platforms that + support this. + + * The PriorityInheritance option now also works in switch mode. + Version 1.1pre4 December 5 2012 * Added the "AutoConnect" option which will let tinc automatically select @@ -66,6 +227,46 @@ Version 1.1pre1 June 25 2011 Thanks to Scott Lamb and Sven-Haegar Koch for their contributions to this version of tinc. +Version 1.0.22 August 13 2013 + + * Fixed the combination of Mode = router and DeviceType = tap. + + * The $NAME variable is now set in subnet-up/down scripts. + + * Tinc now gives an error when unknown options are given on the command line. + + * Tinc now correctly handles a space between a short command line option and + an optional argument. + +Thanks to Etienne Dechamps for his contribution to this version of tinc. + +Version 1.0.21 April 22 2013 + + * Drop packets forwarded via TCP if they are too big (CVE-2013-1428). + +Thanks to Martin Schobert for auditing tinc and reporting this vulnerability. + +Version 1.0.20 March 03 2013 + + * Use /dev/tap0 by default on FreeBSD and NetBSD when using switch mode. + + * Minor improvements and clarifications in the documentation. + + * Allow tinc to be cross-compiled with Android's NDK. + + * The discovered PMTU is now also applied to VLAN tagged traffic. + + * The LocalDiscovery option now makes use of all addresses tinc is bound to. + + * Fixed support for tunemu on iOS devices. + + * The PriorityInheritance option now also works with switch mode. + + * Fixed tinc crashing when using a SOCKS5 proxy. + +Thanks to Mesar Hameed, Vilbrekin and Martin Schürrer for their contributions +to this version of tinc. + Version 1.0.19 June 25 2012 * Allow :: notation in IPv6 Subnets.