1 version 1.0.1 Aug 14 2003
3 * Allow empty lines in config files.
5 * Fix handling of spaces and backslashes in filenames under native Windows.
7 * Allow scripts to be executed under native Windows.
9 * Update documentation, make it less Linux specific.
11 version 1.0 Aug 4 2003
13 * Lots of small bugfixes and code cleanups.
15 * Throughput doubled and latency reduced.
17 * Added support for LZO compression.
19 * No need to set MAC address or disable ARP anymore.
21 * Added support for Windows 2000 and XP, both natively and in a Cygwin
24 version 1.0pre8 Sep 16 2002
26 * More fixes for subnets with prefixlength undivisible by 8.
28 * Added support for NetBSD and MacOS/X.
30 * Switched from undirected graphs to directed graphs to avoid certain race
31 conditions and improve scalability.
33 * Generalized broadcasting and forwarding of protocol messages.
35 * Cleanup of source code.
38 version 1.0pre7 Apr 7 2002
40 * Don't do blocking read()s when getting a signal.
42 * Remove RSA key checking code, since it sometimes thinks perfectly good RSA
45 * Fix handling of subnets when prefixlength isn't divisible by 8.
48 version 1.0pre6 Mar 27 2002
50 * Improvement of redundant links:
52 * Non-blocking connects.
54 * Protocol broadcast messages can no longer go into an infinite loop.
56 * Graph algorithm updated to look harder for direct connections.
58 * Good support for routing IPv6 packets over the VPN. Works on Linux,
59 FreeBSD, possibly OpenBSD but not on Solaris.
61 * Support for tunnels over IPv6 networks. Works on all supported
64 * Optional compression of UDP connections using zlib.
66 * Optionally let UDP connections inherit TOS field of tunneled packets.
68 * Optionally start scripts when certain hosts become (un)reachable.
71 version 1.0pre5 Feb 9 2002
73 * Security enhancements:
75 * Added sequence number and optional message authentication code to
78 * Configurable encryption cipher and digest algorithms.
80 * More robust handling of dis- and reconnects.
82 * Added a "switch" and a "hub" mode to allow bridging setups.
84 * Preliminary support for routing of IPv6 packets.
86 * Supports Linux, FreeBSD, OpenBSD and Solaris.
89 It looks like this might be the last release before 1.0.
92 version 1.0pre4 Jan 17 2001
94 * Updated documentation; the documentation now reflects the
95 configuration as it is.
97 * Some internal changes to make tinc scale better for large
98 networks, such as using AVL trees instead of linked lists for the
101 * RSA keys can be stored in separate files if needed. See the
102 documentation for more information.
104 * tinc has now been reported to run on Linux PowerPC and FreeBSD x86.
108 version 1.0pre3 Oct 31 2000
110 * The protocol has been redesigned, and although some details are
111 still under discussion, this is secure. Care has been taken to
112 resist most, if not all, attacks.
114 * Unfortunately this protocol is not compatible with earlier versions,
115 nor are earlier versions compatible with this version. Because the
116 older protocol has huge security flaws, we feel that not
117 implementing backwards compatibility is justified.
119 * Some data about the protocol:
121 * It uses public/private RSA keys for authentication (this is the
122 actual fix for the security hole).
124 * All cryptographic functions have been taken out of tinc, instead
125 it uses the OpenSSL library functions.
127 * Offers support for multiple subnets per tinc daemon.
129 * New is also the support for the universal tun/tap device. This
130 means better portability to FreeBSD and Solaris.
132 * tinc is tested to compile on Solaris, Linux x86, Linux alpha.
134 * tinc now uses the OpenSSL library for cryptographic operations.
135 More information on getting and installing OpenSSL is in the manual.
136 This also means that the GMP library is no longer required.
138 * Further, thanks to Enrique Zanardi, we have Spanish messages; Matias
139 Carrasco provided us with a Spanish translation of the manual.
142 What still needs to be done before 1.0:
144 * Documentation. Especially since the protocol has changed, and a lot
145 of configuration directives have been added.
150 version 1.0pre2 May 31 2000
152 * This version has been internationalized; and a Dutch translation has
155 * Two configuration variables have been added:
156 * VpnMask - the IP network mask for the entire VPN, not just our
157 subnet (as given by MyVirtualIP). The Redhat and Debian packages
158 use this variable in their system startup scripts, but it is
160 * Hostnames - if set to `yes', look up the names of IP addresses
161 trying to connect to us. Default set to `no', to prevent lockups
164 * The system startup scripts for Debian and Redhat use
165 /etc/tinc/nets.boot to find out which networks need to be started
168 * Fixes to prevent denial of service attacks by sending random data
169 after connecting (and even when the connection has been established),
170 either random garbage or just nonsensical protocol fields.
172 * tinc will retry to connect upon startup, does not quit if it doesn't
175 * Hosts that are disconnected implicitly if we lose a connection get
176 deleted from the internal list, to prevent hogging eachother with
177 add and delete requests when the connection is restored.
180 What still needs to be done before 1.0:
183 * Failover ConnectTo lines, try another one if the first doesn't work.
188 version 1.0pre1 May 12 2000
190 * Various other bugfixes
191 * Documentation updates
193 version 0.3.3 Feb 9 2000
194 * Fixed bug that made tinc stop working with latest kernels (Guus
198 version 0.3.2 Nov 12 1999
199 * no more `Invalid filedescriptor' when working with multiple
201 * forward unknown packets to uplink
203 version 0.3.1 Oct 20 1999
204 * fixed a bug where tinc would exit without a trace
206 version 0.3 Aug 20 1999
207 * pings now work immediately
208 * all packet sizes get transmitted correctly
210 version 0.2.26 Aug 15 1999
211 * fixed some remaining bugs
212 * --sysconfdir works with configure
213 * last version before 0.3
215 version 0.2.25 Aug 8 1999
216 * improved stability, going towards 0.3 now.
218 version 0.2.24 Aug 7 1999
219 * added key aging, there's a new config variable, KeyExpire.
220 * updated man and info pages
222 version 0.2.23 Aug 5 1999
223 * all known bugs fixed, this is a candidate for 0.3
225 version 0.2.22 Apr 11 1999
226 * multiconnection thing is now working nearly perfect :)
228 version 0.2.21 Apr 10 1999
229 * You shouldn't notice a thing, but a lot has changed wrt key
230 management - except that it refuses to talk to versions < 0.2.20
234 version 0.2.19 Apr 3 1999
235 * don't install a libcipher.so
237 version 0.2.18 Apr 3 1999
238 * blowfish library dynamically loaded upon execution
239 * included Eric Young's IDEA library
241 version 0.2.17 Apr 1 1999
242 * tincd now re-executes itself in case of a segmentation fault.
244 version 0.2.16 Apr 1 1999
245 * wrote tincd.conf(5) man page, which still needs a lot of work.
246 * config file now accepts and tolerates spaces, and any integer base
247 for integer variables, and better error reporting. See
248 doc/tincd.conf.sample for an example.
250 version 0.2.15 Mar 29 1999
253 version 0.2.14 Feb 10 1999
254 * added --timeout flag and PingTimeout configuration
255 * did some first syslog cleanup work
257 version 0.2.13 Jan 23 1999
260 version 0.2.12 Jan 23 1999
261 * fixed nauseating bug so that it would crash whenever a connection
264 version 0.2.11 Jan 22 1999
265 * framework for multiple connections has been done
266 * simple manpage for tincd
268 version 0.2.10 Jan 18 1999
269 * passphrase support added
271 version 0.2.9 Jan 13 1999
274 version 0.2.8 Jan 11 1999
275 * a reworked protocol version
277 * more reliable networking code
278 * automatic reconnection
279 * still does not work with more than one connection :)
280 * strips MAC addresses before sending, so there's less overhead, and
283 version 0.2.7 Jan 3 1999
284 * several updates to make extending more easy.
286 version 0.2.6 Dec 20 1998
287 * Point-to-Point connections have been established, including
288 blowfish encryption and a secret key-exchange.
290 version 0.2.5 Dec 16 1998
291 * Project renamed to tinc, in honour of TINC.
293 version 0.2.4 Dec 16 1998
294 * now it really does ;)
296 version 0.2.3 Nov 24 1998
297 * it sort of works now
299 version 0.2.2 Nov 20 1998
302 version 0.2.1 Nov 14 1998