the report of libreswan-4.5-1.0.1.an8.src.rpm to libreswan-4.6-3.0.1.an8.src.rpm

Legends

Colors
added
changed
deleted

Links
(f)irst change
(n)ext change
(t)op

RPM Info
Path and File
Provides Dependencices
Requires Dependencices
Changelogs

f	1	Name : libreswan	f	1	Name : libreswan
n	2	Version : 4.5	n	2	Version : 4.6
	3	Release : 1.0.1.an8		3	Release : 3.0.1.an8
	4	Architecture: x86_64		4	Architecture: x86_64
	5	Install Date: (not installed)		5	Install Date: (not installed)
	6	Group : Unspecified		6	Group : Unspecified
n	7	Size : 4889805	n	7	Size : 4936846
	8	License : GPLv2		8	License : GPLv2
n	9	Signature : RSA/SHA256, 2022年05月11日星期三 13时10分05秒, Key ID 619140084873f7c5	n	9	Signature : RSA/SHA256, 2022年12月26日星期一 15时49分19秒, Key ID 619140084873f7c5
	10	Source RPM : libreswan-4.5-1.0.1.an8.src.rpm		10	Source RPM : libreswan-4.6-3.0.1.an8.src.rpm
	11	Build Date : 2022年04月21日星期四 10时36分32秒		11	Build Date : 2022年12月26日星期一 15时31分56秒
	12	Build Host : anolis-build-02.openanolis.cn		12	Build Host : anolis-build-02.openanolis.cn
	13	Relocations : (not relocatable)		13	Relocations : (not relocatable)
	14	Packager : OpenAnolis Community		14	Packager : OpenAnolis Community
	15	Vendor : OpenAnolis Community		15	Vendor : OpenAnolis Community
	16	URL : https://libreswan.org/		16	URL : https://libreswan.org/
n	17	Summary : IPsec implementation with IKEv1 and IKEv2 keying protocols	n	17	Summary : Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
	18	Description :		18	Description :
t	19	Libreswan is a free implementation of IKE/IPsec for Linux. IPsec is	t	19	Libreswan is a free implementation of IPsec & IKE for Linux. IPsec is
	20	the Internet Protocol Security and uses strong cryptography to provide		20	the Internet Protocol Security and uses strong cryptography to provide
	21	both authentication and encryption services. These services allow you		21	both authentication and encryption services. These services allow you
	22	to build secure tunnels through untrusted networks. Everything passing		22	to build secure tunnels through untrusted networks. Everything passing
	23	through the untrusted net is encrypted by the ipsec gateway machine and		23	through the untrusted net is encrypted by the ipsec gateway machine and
	24	decrypted by the gateway at the other end of the tunnel. The resulting		24	decrypted by the gateway at the other end of the tunnel. The resulting

	11	-rw-r--r-- /etc/logrotate.d/libreswan		11	-rw-r--r-- /etc/logrotate.d/libreswan
	12	-rw-r--r-- /etc/pam.d/pluto		12	-rw-r--r-- /etc/pam.d/pluto
	13	-rw-r--r-- /etc/sysctl.d/50-libreswan.conf		13	-rw-r--r-- /etc/sysctl.d/50-libreswan.conf
	14	drwxr-xr-x /run/pluto		14	drwxr-xr-x /run/pluto
	15	drwxr-xr-x /usr/lib/.build-id		15	drwxr-xr-x /usr/lib/.build-id
n	16	drwxr-xr-x /usr/lib/.build-id/2d	n
	17	lrwxrwxrwx /usr/lib/.build-id/2d/0d4e570eba6a8ccac343e86d2f44e60da430b5
	18	drwxr-xr-x /usr/lib/.build-id/3f
	19	lrwxrwxrwx /usr/lib/.build-id/3f/00d816fc4d07dacc981a2f1741316babe6cdad
	20	drwxr-xr-x /usr/lib/.build-id/5d
	21	lrwxrwxrwx /usr/lib/.build-id/5d/04e4a13e1869b8ac51554f423a33b0328a8970
	22	drwxr-xr-x /usr/lib/.build-id/9a
	23	lrwxrwxrwx /usr/lib/.build-id/9a/2b23faa4849ec1f6f3f093dc81daa914d749be
	24	lrwxrwxrwx /usr/lib/.build-id/9a/7d91d87e7233a898bdfc60e0eef200ce949848
	25	drwxr-xr-x /usr/lib/.build-id/b0		16	drwxr-xr-x /usr/lib/.build-id/0e
	26	lrwxrwxrwx /usr/lib/.build-id/b0/c5060a1eefa6fc4019402af6b3e9904e7ca023		17	lrwxrwxrwx /usr/lib/.build-id/0e/aa0c37a519689417eed772b4fd0c77259370c2
	27	lrwxrwxrwx /usr/lib/.build-id/b0/e4984f9b909bd7874d24031fde06e468cf0fd4		18	drwxr-xr-x /usr/lib/.build-id/34
				19	lrwxrwxrwx /usr/lib/.build-id/34/b573a9b5ab53dbebb1a3070f8b93799a16f39f
				20	drwxr-xr-x /usr/lib/.build-id/39
				21	lrwxrwxrwx /usr/lib/.build-id/39/e72a1a13e5fb4b1eb6379b59517919b91a83f6
				22	drwxr-xr-x /usr/lib/.build-id/71
				23	lrwxrwxrwx /usr/lib/.build-id/71/e4b8b97b4a3c0dbbe5fa57b3db0d28a72eff0c
				24	drwxr-xr-x /usr/lib/.build-id/78
				25	lrwxrwxrwx /usr/lib/.build-id/78/79e8ee8100995dc0c2bf049586241a00fe931f
				26	drwxr-xr-x /usr/lib/.build-id/82
				27	lrwxrwxrwx /usr/lib/.build-id/82/4f6c774f2304eaff1e6e05f59e6d1f55989b0e
				28	drwxr-xr-x /usr/lib/.build-id/8f
				29	lrwxrwxrwx /usr/lib/.build-id/8f/a43f13ccd05b483e0043cd9c89223c7d6b0483
				30	drwxr-xr-x /usr/lib/.build-id/b9
				31	lrwxrwxrwx /usr/lib/.build-id/b9/451bd99300f0bfa08c25df5b7440c6fdc32b58
	28	drwxr-xr-x /usr/lib/.build-id/bb		32	drwxr-xr-x /usr/lib/.build-id/bb
n	29	lrwxrwxrwx /usr/lib/.build-id/bb/b0ad63d2ba80b87704ea1eb2e8e6790d30f9fd	n	33	lrwxrwxrwx /usr/lib/.build-id/bb/ef06fd1ddb7e535df608003bc36f11e1834ebe
	30	drwxr-xr-x /usr/lib/.build-id/c2		34	drwxr-xr-x /usr/lib/.build-id/c9
	31	lrwxrwxrwx /usr/lib/.build-id/c2/dfa28534dee6ed0196f14f71275bcb0793bb24		35	lrwxrwxrwx /usr/lib/.build-id/c9/416d5b7fcd4abde72e3f7bff38a1be6a451728
	32	drwxr-xr-x /usr/lib/.build-id/c5		36	drwxr-xr-x /usr/lib/.build-id/e6
	33	lrwxrwxrwx /usr/lib/.build-id/c5/c006378003ba53040bda9e18200b0911420e74		37	lrwxrwxrwx /usr/lib/.build-id/e6/b9b7d8ada183580e605e1aed1efcc6c8956ac0
	34	drwxr-xr-x /usr/lib/.build-id/f7
	35	lrwxrwxrwx /usr/lib/.build-id/f7/d03358f27cbb817851c27c1221af52b89d69fa
	36	-rw-r--r-- /usr/lib/systemd/system/ipsec.service		38	-rw-r--r-- /usr/lib/systemd/system/ipsec.service
	37	-rw-r--r-- /usr/lib/tmpfiles.d/libreswan.conf		39	-rw-r--r-- /usr/lib/tmpfiles.d/libreswan.conf
	38	drwxr-xr-x /usr/libexec/ipsec		40	drwxr-xr-x /usr/libexec/ipsec
	39	-rwxr-xr-x /usr/libexec/ipsec/_import_crl		41	-rwxr-xr-x /usr/libexec/ipsec/_import_crl
	40	-rwxr-xr-x /usr/libexec/ipsec/_plutorun		42	-rwxr-xr-x /usr/libexec/ipsec/_plutorun
	132	-rw-r--r-- /usr/share/man/man8/ipsec_show.8.gz		134	-rw-r--r-- /usr/share/man/man8/ipsec_show.8.gz
	133	-rw-r--r-- /usr/share/man/man8/ipsec_showhostkey.8.gz		135	-rw-r--r-- /usr/share/man/man8/ipsec_showhostkey.8.gz
	134	-rw-r--r-- /usr/share/man/man8/ipsec_verify.8.gz		136	-rw-r--r-- /usr/share/man/man8/ipsec_verify.8.gz
	135	-rw-r--r-- /usr/share/man/man8/ipsec_whack.8.gz		137	-rw-r--r-- /usr/share/man/man8/ipsec_whack.8.gz
	136	-rw-r--r-- /usr/share/man/man8/pluto.8.gz		138	-rw-r--r-- /usr/share/man/man8/pluto.8.gz
t			t	139	drwx------ /var/lib/ipsec
				140	drwx------ /var/lib/ipsec/nss

t	1	config(libreswan) = 4.5-1.0.1.an8	t	1	config(libreswan) = 4.6-3.0.1.an8
	2	libreswan = 4.5-1.0.1.an8		2	libreswan = 4.6-3.0.1.an8
	3	libreswan(x86-64) = 4.5-1.0.1.an8		3	libreswan(x86-64) = 4.6-3.0.1.an8

	2	/bin/sh		2	/bin/sh
	3	/bin/sh		3	/bin/sh
	4	/usr/bin/sh		4	/usr/bin/sh
	5	/usr/libexec/platform-python		5	/usr/libexec/platform-python
	6	bash		6	bash
n	7	config(libreswan) = 4.5-1.0.1.an8	n	7	config(libreswan) = 4.6-3.0.1.an8
	8	coreutils		8	coreutils
	9	iproute >= 2.6.8		9	iproute >= 2.6.8
	10	libaudit.so.1()(64bit)		10	libaudit.so.1()(64bit)
	11	libc.so.6()(64bit)		11	libc.so.6()(64bit)
	12	libc.so.6(GLIBC_2.14)(64bit)		12	libc.so.6(GLIBC_2.14)(64bit)
	60	libsmime3.so(NSS_3.3)(64bit)		60	libsmime3.so(NSS_3.3)(64bit)
	61	libsmime3.so(NSS_3.4)(64bit)		61	libsmime3.so(NSS_3.4)(64bit)
	62	libsmime3.so(NSS_3.9.3)(64bit)		62	libsmime3.so(NSS_3.9.3)(64bit)
	63	libsystemd.so.0()(64bit)		63	libsystemd.so.0()(64bit)
	64	libsystemd.so.0(LIBSYSTEMD_209)(64bit)		64	libsystemd.so.0(LIBSYSTEMD_209)(64bit)
t	65	libunbound.so.2()(64bit)	t	65	libunbound.so.8()(64bit)
	66	nss >= 3.53.1		66	nss >= 3.52
	67	nss-softokn		67	nss-softokn
	68	nss-tools		68	nss-tools
	69	rpmlib(CompressedFileNames) <= 3.0.4-1		69	rpmlib(CompressedFileNames) <= 3.0.4-1
	70	rpmlib(FileDigests) <= 4.6.0-1		70	rpmlib(FileDigests) <= 4.6.0-1
	71	rpmlib(PayloadFilesHavePrefix) <= 4.0-1		71	rpmlib(PayloadFilesHavePrefix) <= 4.0-1

n	1	* 一 4月 18 2022 yangxiaoxuan <yangxiaoxuan@openanolis.org> - 4.5-1.0.1	n	1	* 一 12月 26 2022 Xiaoping Liu <liuxiaoping@alibaba-inc.com> - 4.6-3.0.1
	2	- Rebrand to anolis		2	- Rebuild for Anolis OS 8
	3			3
n			n	4	* 三 2月 02 2022 Daiki Ueno <dueno@redhat.com> - 4.6-3
				5	- Drop IKEv1 packets by default, based on the Debian patch
				6	by Daniel Kahn Gillmor (rhbz#2039877)
				7
				8	* 一 1月 17 2022 Daiki Ueno <dueno@redhat.com> - 4.6-2
				9	- Related: rhbz#2017355 rebuild to reflect gating.yaml change
				10
				11	* 一 1月 17 2022 Daiki Ueno <dueno@redhat.com> - 4.6-1
				12	- Update to 4.6. Resolves: rhbz#2017355
				13
	4	* 四 1月 13 2022 Daiki Ueno <dueno@redhat.com> - 4.5-1		14	* 一 1月 10 2022 Daiki Ueno <dueno@redhat.com> - 4.5-1
	5	- Resolves: rhbz#2017352 Rebase libreswan to 4.5		15	- Update to 4.5. Resolves: rhbz#2017355
	6	- Resolves: rhbz#2036903 ikev1: disable diagnostics logging on receiving malformed packets
	7			16
n			n	17	* 一 8月 09 2021 Mohan Boddu <mboddu@redhat.com> - 4.4-3.1
				18	- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
				19	Related: rhbz#1991688
				20
	8	* 三 5月 26 2021 Daiki Ueno <dueno@redhat.com> - 4.4-1		21	* 三 7月 21 2021 Daiki Ueno <dueno@redhat.com> - 4.4-3
	9	- Resolves: rhbz#1958968 Rebase libreswan to 4.4		22	- Backport removal gethostbyname2 uses from the upstream
	10	- Resolves: rhbz#1954423 Libreswan: TS_UNACCEPTABLE on multiple connections between the same peers		23	- Fix issues spotted by covscan (rhbz#1938784)
	11			24
n	12	* 四 3月 04 2021 Paul Wouters <pwouters@redhat.com> - 4.3-3	n	25	* 二 7月 13 2021 Daiki Ueno <dueno@redhat.com> - 4.4-2
	13	- Resolves: rhbz#1933064 - IKEv2 support for Labeled IPsec		26	- Rebuild with newer GCC to fix annocheck failures
	14	- Resolves: rhbz#1935150 RFE: Support IKE and ESP over TCP: RFC 8229
	15	- Resolves: rhbz#1935339 virtual_private setting is missing in the default config
	16			27
n	17	* 日 2月 21 2021 Paul Wouters <pwouters@redhat.com> - 4.3-1	n	28	* 四 7月 01 2021 Daiki Ueno <dueno@redhat.com> - 4.4-1
	18	- Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec [update]		29	- Update to 4.4. Resolves: rhbz#1975812
				30	- Port compiler warning suppression by Paul Wouters:
				31	https://src.fedoraproject.org/rpms/libreswan/c/8d7f98d41444ac77c562f735b4b93038f5346ce2?branch=rawhide
	19			32
n			n	33	* 四 6月 24 2021 Daiki Ueno <dueno@redhat.com> - 4.2-1.3
				34	- Fix FTBFS with OpenSSL 3.0 (rhbz#1975439)
				35
				36	* 二 6月 22 2021 Mohan Boddu <mboddu@redhat.com> - 4.2-1.2
				37	- Rebuilt for RHEL 9 BETA for openssl 3.0
				38	Related: rhbz#1971065
				39
				40	* 五 4月 16 2021 Mohan Boddu <mboddu@redhat.com> - 4.2-1.1
				41	- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
				42
	20	* 四 2月 04 2021 Paul Wouters <pwouters@redhat.com> - 4.2-1		43	* 三 2月 03 2021 Paul Wouters <pwouters@redhat.com> - 4.2-1
	21	- Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.2		44	- Update to 4.2
	22	- Resolves: rhbz#1025061 - IKEv2 support for Labeled IPsec
	23			45
n			n	46	* 二 1月 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 4.2-0.1.rc1.1
				47	- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
				48
				49	* 日 12月 20 2020 Paul Wouters <pwouters@redhat.com> - 4.2-0.1.rc1
				50	- Resolves: rhbz#1867580 pluto process frequently dumps core
				51	(disable USE_NSS_KDF until nss fixes have propagated)
				52
				53	* 六 12月 19 2020 Adam Williamson <awilliam@redhat.com> - 4.1-4
				54	- Rebuild for ldns soname bump
				55
				56	* 二 11月 24 2020 Paul Wouters <pwouters@redhat.com> - 4.1-3
				57	- Resolves: rhbz#1894381 Libreswan 4.1-2 breaks l2tp connection to Windows VPN server
				58
	24	* 三 10月 28 2020 Paul Wouters <pwouters@redhat.com> - 4.1-1		59	* 一 10月 26 2020 Paul Wouters <pwouters@redhat.com> - 4.1-2
	25	- Resolves: rhbz#1891128 [Rebase] rebase libreswan to 4.1		60	- Resolves: rhbz#1889538 libreswan's /var/lib/ipsec/nss missing
	26	- Resolves: rhbz#1889836 libreswan: add 3.x compat patches for obsoleted/removed keywords of 4.0 and re-port ikev2= patch
	27			61
n	28	* 三 7月 29 2020 Paul Wouters <pwouters@redhat.com> - 3.32-6	n	62	* 一 10月 19 2020 Paul Wouters <pwouters@redhat.com> - 4.1-1
	29	- Resolves: rhbz#1861360 authby=rsasig must not imply usage of rsa-pss		63	- Updated to 4.1 - interop fix for Cisco
	30			64
n	31	* 三 7月 22 2020 Paul Wouters <pwouters@redhat.com> - 3.32-5	n
	32	- Resolves: rhbz#1820206 Rebase to libreswan 3.32 [rebuild for USE_NSS_PRF]
	33
	34	* 三 7月 01 2020 Paul Wouters <pwouters@redhat.com> - 3.32-4		65	* 四 10月 15 2020 Paul Wouters <pwouters@redhat.com> - 4.0-1
	35	- Resolves: rhbz#1544463 ipsec service does not work correctly when seccomp filtering is enabled		66	- Resolves: rhbz#1888448 libreswan-4.0 is available
	36			67
n	37	* 三 6月 17 2020 Paul Wouters <pwouters@redhat.com> - 3.32-3	n	68	* 三 9月 30 2020 Paul Wouters <pwouters@redhat.com> - 4.0-0.2.rc1
	38	- Resolves: rhbz#1842597 regression: libreswan does not send PLUTO_BYTES env variables to updown script		69	- Rebuild for libevent 2.1.12 with a soname bump
	39	- Resolves: rhbz#1847766 subsequent xfrmi interfaces configured outside of libreswan are not recognised properly
	40	- Resolves: rhbz#1840212 protect libreswan against unannounced nss ABI change
	41			70
n			n	71	* 一 9月 28 2020 Paul Wouters <pwouters@redhat.com> - 4.0-0.1.rc1
				72	- Updated to 4.0rc1
				73
	42	* 四 6月 11 2020 Paul Wouters <pwouters@redhat.com> - 3.32-2		74	* 四 8月 27 2020 Paul Wouters <pwouters@redhat.com> - 3.32-4
	43	- Resolves: rhbz#1820206 Rebase to libreswan 3.32 [addconn fix]		75	- Resolves: rhbz#1864043 libreswan: FTBFS in Fedora rawhide/f33
	44			76
n			n	77	* 六 8月 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.32-3.2
				78	- Second attempt - Rebuilt for
				79	https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
				80
				81	* 二 7月 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.32-3.1
				82	- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
				83
				84	* 二 6月 30 2020 Jeff Law <law@redhat.com> - 3.32-3
				85	- Initialize ppk_id_p in ikev2_parent_inR1outI2_tail to avoid uninitialized
				86	object
				87
				88	* 二 5月 26 2020 Paul Wouters <pwouters@redhat.com> - 3.32-2
				89	- Backport NSS guarding fix for unannounced changed api in NSS causing segfault
				90
				91	* 一 5月 11 2020 Paul Wouters <pwouters@redhat.com> - 3.32-1
				92	- Resolves: rhbz#1809770 libreswan-3.32 is available
				93
				94	* 二 4月 14 2020 Paul Wouters <pwouters@redhat.com> - 3.31-2
				95	- Resolves: rhbz#1823823 Please drop the dependency on fipscheck
				96
				97	* 二 3月 03 2020 Paul Wouters <pwouters@redhat.com> - 3.31-1
				98	- Resolves: rhbz#1809770 libreswan-3.31 is available (fixes rekey regression)
				99
				100	* 五 2月 14 2020 Paul Wouters <pwouters@redhat.com> - 3.30-1
				101	- Resolves: rhbz#1802896 libreswan-3.30 is available
				102	- Resolves: rhbz#1799598 libreswan: FTBFS in Fedora rawhide/f32
				103	- Resolves: rhbz#1760571 [abrt] libreswan: configsetupcheck(): verify:366:configsetupcheck:TypeError:
				104
				105	* 三 1月 29 2020 Fedora Release Engineering <releng@fedoraproject.org> - 3.29-2.1
				106	- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
				107
	45	* 四 4月 30 2020 Paul Wouters <pwouters@redhat.com> - 3.32-1		108	* 四 1月 09 2020 Paul Wouters <pwouters@redhat.com> - 3.29-2
	46	- Resolves: rhbz#1820206 Rebase to libreswan 3.32		109	- _updown.netkey: fix syntax error in checking routes
	47	- Resolves: rhbz#1816265 Use NSS to check whether FIPS mode is enabled
	48	- Resolves: rhbz#1826337 libreswan in FIPS mode rejects ECDSA keys based on faulty RSA key size check being applied
	49			110
n	50	* 二 8月 13 2019 Paul Wouters <pwouters@redhat.com> - 3.29-6	n	111	* 四 7月 25 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.29-1.1
	51	- Resolves: rhbz#1714331 support NSS based IKE KDF's [require updated nss for rhbz 1738689, memleak fix]		112	- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
	52
	53	* 四 8月 08 2019 Paul Wouters <pwouters@redhat.com> - 3.29-5
	54	- Resolves: rhbz#1714331 support NSS based IKE KDF's so libreswan does not need FIPS certification
	55
	56	* 四 8月 01 2019 Paul Wouters <pwouters@redhat.com> - 3.29-4
	57	- Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
	58
	59	* 四 7月 04 2019 Paul Wouters <pwouters@redhat.com> - 3.29-3
	60	- Resolves: rhbz#1725205 XFRM policy for OE/32 peer is deleted when shunts for previous half-open state expire
	61
	62	* 四 6月 27 2019 Paul Wouters <pwouters@redhat.com> - 3.29-2
	63	- Resolves: rhbz#1723957 libreswan is missing linux audit calls for failed IKE SAs and failed IPsec SAs required for Common Criteria
	64			113
	65	* 一 6月 10 2019 Paul Wouters <pwouters@redhat.com> - 3.29-1		114	* 一 6月 10 2019 Paul Wouters <pwouters@redhat.com> - 3.29-1
n	66	- Resolves: rhbz#1712555 libreswan rebase to 3.29	n	115	- Resolves: rhbz#1718986 Updated to 3.29 for CVE-2019-10155
	67
	68	* 二 5月 28 2019 Paul Wouters <pwouters@redhat.com> - 3.28-2
	69	- Resolves: rhbz#1713734: barf: shell syntax error in barf diagnostic tool
	70			116
	71	* 二 5月 21 2019 Paul Wouters <pwouters@redhat.com> - 3.28-1		117	* 二 5月 21 2019 Paul Wouters <pwouters@redhat.com> - 3.28-1
n	72	- Resolves: rhbz#1712555 libreswan rebase to 3.28	n	118	- Updated to 3.28 (many imported bugfixes, including CVE-2019-12312)
	73	- Resolves: rhbz#1683706 Libreswan shows incorrect error messages
	74	- Resolves: rhbz#1706180 Remove last usage of old (unused) PF_KEY API
	75	- Resolves: rhbz#1677045 Opportunistic IPsec instances of /32 groups or auto=start that receive delete won't restart
	76	- Resolves: rhbz#1686990 IKEv1 traffic interruption when responder deletes SAs 60 seconds before EVENT_SA_REPLACE
	77	- Resolves: rhbz#1608353 /usr/sbin/ipsec part of the libreswan packages still invokes commands that were deprecated a decade ago
	78	- Resolves: rhbz#1699318 'ipsec show' has python3 invalid syntax
	79	- Resolves: rhbz#1679394 libreswan using NSS IPsec profiles regresses when critical flags are set causing validation failure
	80			119
n	81	* 四 2月 21 2019 Paul Wouters <pwouters@redhat.com> - 3.27-9	n	120	* 五 2月 01 2019 Fedora Release Engineering <releng@fedoraproject.org> - 3.27-1.2
	82	- Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default [man page update]		121	- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
	83			122
n	84	* 五 2月 15 2019 Paul Wouters <pwouters@redhat.com> - 3.27-8	n	123	* 一 1月 14 2019 Björn Esser <besser82@fedoraproject.org> - 3.27-1.1
	85	- Resolves: rhbz#1664101 system wide crypto policies causing IKE_INIT packet fragmentation		124	- Rebuilt for libcrypt.so.2 (#1666033)
	86
	87	* 二 2月 05 2019 Paul Wouters <pwouters@redhat.com> - 3.27-7
	88	- Resolves: rhbz#1671793 proessing ISAKMP_NEXT_D with additional payloads causes dangling pointer to deleted state
	89
	90	* 五 2月 01 2019 Paul Wouters <pwouters@redhat.com> - 3.27-6
	91	- Resolves: rhbz#1668342 SELinux prevents libreswan from using some outbound ports causing DNS resolution failures at connection at load time
	92
	93	* 四 1月 10 2019 Paul Wouters <pwouters@redhat.com> - 3.27-5
	94	- Resolves: rhbz#1664522 libreswan 3.25 in FIPS mode is incorrectly rejecting X.509 public keys that are >= 3072 bits
	95
	96	* 一 12月 10 2018 Paul Wouters <pwouters@redhat.com> - 3.27-4
	97	- Resolves: rhbz#1657846 libreswan no longer needs to provide openswan in rhel8
	98	- Resolves: rhbz#1643388 libreswan: Unable to verify certificate with non-empty Extended Key Usage which does not include serverAuth or clientAuth
	99	- Resolves: rhbz#1657854 remove userland support for deprecated KLIPS IPsec stack support
	100
	101	* 日 12月 09 2018 Paul Wouters <pwouters@redhat.com> - 3.27-3
	102	- Resolves: rhbz#1648776 limit connections to be ikev1only or ikev2only and make ikev2only the default
	103
	104	* 四 11月 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-2
	105	- Resolves: rhbz#1645137 Libreswan segfaults when it loads configuration file with more then 5 connections
	106			125
	107	* 一 10月 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-1		126	* 一 10月 08 2018 Paul Wouters <pwouters@redhat.com> - 3.27-1
n	108	- Resolves: rhbz#1566574 Rebase to libreswan 3.27	n	127	- Updated to 3.27 (various bugfixes)
				128
				129	* 四 9月 27 2018 Paul Wouters <pwouters@redhat.com> - 3.26-3
				130	- Add fedora python fixup for _unbound-hook
				131
				132	* 一 9月 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-2
				133	- linking against freebl is no longer needed (and wasn't done in 3.25)
	109			134
	110	* 一 9月 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-1		135	* 一 9月 17 2018 Paul Wouters <pwouters@redhat.com> - 3.26-1
n	111	- Resolves: rhbz#1566574 Rebase to libreswan 3.26	n	136	- Updated to 3.26 (CHACHA20POLY1305, ECDSA and RSA-PSS support)
	112	- Resolves: rhbz#1527037 libreswan IPSEC implementation: should follow the policies of system-wide crypto policy
	113	- Resolves: rhbz#1375779 [IKEv2 Conformance] Test IKEv2.EN.R.1.1.6.7: Sending INVALID_KE_PAYLOAD failed
	114	- Resolves: rhbz#1085758 [TAHI][IKEv2] IKEv2.EN.I.1.2.1.1: Can't observe CREATE_CHILD_SA request for rekey
	115	- Resolves: rhbz#1053048 [TAHI][IKEv2] IKEv2.EN.I.1.2.4.1-7: libreswan doesn't sent CREATE_CHILD_SA after IKE_SA Lifetime timeout
	116			137
n	117	* 一 8月 13 2018 Paul Wouters <pwouters@redhat.com> - 3.25-4	n	138	* 五 7月 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.25-3.1
	118	- Resolves: rhbz#1590823 libreswan: Use Python 3 in RHEL 8		139	- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
	119
	120	* 三 8月 01 2018 Charalampos Stratakis <cstratak@redhat.com> - 3.25-3.1
	121	- Rebuild for platform-python
	122			140
	123	* 一 7月 09 2018 Paul Wouters <pwouters@redhat.com> - 3.25-3		141	* 一 7月 09 2018 Paul Wouters <pwouters@redhat.com> - 3.25-3
n	124	- Cleanup shebangs for python3	n	142	- Fix Opportunistic IPsec _unbound-hook argument parsing
	125	- Use the same options via macro for make programs and make install		143	- Make rundir readable for all (so we can hand out permissions later)
	126	- Remove old ifdefs
	127	- Sync up patches to new upstream version
	128	- Add Requires: for unbound-libs >= 1.6.6
	129	- Enable crypto-policies support
	130	- Make rundir world readable for easier permission granting for socket
	131			144
n	132	* 二 6月 26 2018 Charalampos Stratakis <cstratak@redhat.com> - 3.23-2.2	n	145	* 一 7月 02 2018 Paul Wouters <pwouters@redhat.com> - 3.25-2
	133	- Make python shebangs point to python3		146	- Relax deleting IKE SA's and IPsec SA's to avoid interop issues with third party VPN vendors
	134			147
t	135	* 五 6月 22 2018 Troy Dawson <tdawson@redhat.com> - 3.23-2.1	t	148	* 三 6月 27 2018 Paul Wouters <pwouters@redhat.com> - 3.25-1
	136	- Fix python shebangs (#1580773)		149	- Updated to 3.25
	137			150
	138	* 一 2月 19 2018 Paul Wouters <pwouters@redhat.com> - 3.23-2		151	* 一 2月 19 2018 Paul Wouters <pwouters@redhat.com> - 3.23-2
	139	- Support crypto-policies package		152	- Support crypto-policies package
	140	- Pull in some patches from upstream and IANA registry updates		153	- Pull in some patches from upstream and IANA registry updates
	141	- gcc7 format-truncate fixes and workarounds		154	- gcc7 format-truncate fixes and workarounds