Component: sstp
36 changelog entries across 27 version(s)
Activity over time (changelog entries per month)
- added pfs=required option to allow only ECDHE during TLS handshake;
- added SNI support;
- disconnect clients when server is disabled;
- added support for "aes256-gcm-sha384" encryption;
- improved system stability for PPC devices;
- fixed TLS session establishment when "connect-to" is DNS name;
- added VRF support for client;
- fixed client stuck in "nonce matching" state;
- fixed client stuck in "nonce matching" state;
- fixed "idle-timeout" on TILE and CHR devices;
- improved stability when received traffic hits tarpit firewall;
- allow to specify proxy by dns name;
- now supports TLS_ECDHE algorithms;
- fixed disconnects on transmit for multicore systems;
- fixed dns name support in connect-to field if http-proxy is specified;
- allow ECDHE when pfs enabled;
- allow to limit tls version to v1.2 only;
- fixed kernel crash when other party started to fragment ppp packets in the middle;
- avoid routing loops on client when adding default route;
- fixed problem where sometimes sstp ip addresses were invalid;
- fixed router lockup.
- added pfs option which enables DHE;
- fixed problem were Windows 8 clients couldn't connect;
- fixed disconnects on high traffic load;
- make sstp work on i386 as well;
- force sstp to not use MPPE encryption (it already has TLS one);
- make it work for x86 systems
- report TLS encryption as well;
- fixed problem where session was closed every 2min;
- fixed crashes;
- make it work with Windows client with AES encryption;
- limit packet queue for each device;
- fix high CPU usage on SSL handshake;
- improve initial handshake to better handle many new connections;
- fixed connection idle time reporting;
- added RC4 cipher support to fix interoperability issues