[Announce] ANNOUNCE: strongswan-4.2.8 release

[Andreas Steffen]

Hi,

the strongSwan 4.2.8 brings the following improvements and fixes:

- IKEv2 charon daemon supports authentication based on raw public keys
  stored in the SQL database backend. The "ipsec listpubkeys" command
  lists the available raw public keys via the stroke interface.

- Several MOBIKE improvements:
   * Detect changes in NAT mappings in DPD exchanges;
   * Handle events if kernel detects NAT mapping changes in
     UDP-encapsulated ESP packets (requires kernel patch);
   * Reuse old addesses in MOBIKE updates as long as possible and
     some other fixes.

- Fixed a bug in addr_in_subnet() which caused insertion of wrong source
  routes for destination subnets having netmasks not being a multiple
  of 8 bits. Thanks go to Wolfgang Steudel, TU Ilmenau, for reporting
  this bug.

Best regards

Martin Willi & Andreas Steffen

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org

Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==