NuFW developpement team is proud to announce the availability of NuFW 2.2.11.
This new release features an impressive work on TLS subsystem which has be done to be able to be completely strict relatively to all cryptographic usage.
The full changelog is as follows :
libnuclient: don’t leave when default cafile is not found
factorize IPv6 code, especially IPv6 formatting (display IPv4 as IPv4 and not "::ffff:a.b.c.d")
plaintext: simplify ACL description, most parameters are now optional
plaintext: fix netmask parser
libnuclient: fix function to stop check thread for Mac OS X
fix command line parser: option ’-p’ was limited to 3 characters
ldap: fix and document ldaps connection
nufw: add -S option to do strict checking during TLS negotiation
nuauth: be nicer with TLS client when it rejects them because certificate is invalid
nufw: warn when TLS session is closed by nauth
nuauth: add username when printing connections
NuFW: fix a file descriptor leak in client and nufw
NuFW: improve TLS subsystem