version 1.2.20 release

Compatible with NetworkManager 1.2 and later.

Summary of changes since NetworkManager-l2tp 1.2.18 :

• Security fix - properly detect that strongswan CHILD_SA connection has been established.
• Merged translations from latest NetworkManager-l2tp version.

version 1.0.14 release

Compatible with NetworkManager 0.9.8 and 1.0.x.

Summary of changes since NetworkManager-l2tp 1.0.12 :

• Security fix - properly detect that strongswan CHILD_SA connection has been established.
• Merged translations from latest NetworkManager-l2tp version.

version 1.20.2 release

Compatible with NetworkManager 1.20 and later.

Summary of changes since NetworkManager-l2tp 1.20.0 :

• Gtk4 version of the editor plugin is now available (for use with Control Center of GNOME 42 or later).
• Updated translations.

version 1.20.0 release

Compatible with NetworkManager 1.20 and later.

Summary of changes since NetworkManager-l2tp 1.8.6 :

• Supports kl2tpd from Katalix's go-l2tp project. Will fallback to xl2tpd if kl2tpd is not installed. To install kl2tpd if your Linux distro does not include it, issue:

go install "github.com/katalix/go-l2tp/...@latest"
sudo mkdir /usr/local/sbin
sudo cp go/bin/kl2tpd /usr/local/sbin

• Support for Multilink PPP with multilink PPP MRRU spinbox.
• L2TP ephemeral source port checkbox added.
• Store PSK as a VPN secret, but keep backwards compatibility for Base64 and cleartext PSK VPN configurations.
• deprecated libnm-glib/libnm-util code removed and --with-libnm-glib configure option removed.
• Honors $CHARONDEBUG and $PLUTODEBUG env variables, even when not in debug mode.
• Source code reformatted with clang-format.
• intltool for i18n build support no longer required.
• Updated translations.

version 1.8.6 release

Compatible with NetworkManager 1.8.0 and later.

Summary of changes since NetworkManager-l2tp 1.8.4 :

• Fix for make check warning that was preventing Fedora RPMs from being built. The fix was to add properties/import-export.c to POTFILES.in

version 1.8.4 release

Compatible with NetworkManager 1.8.0 and later.

Summary of changes since NetworkManager-l2tp 1.8.2 :

• Update translations.
• Update strings for new dialog design in gnome-shell. e.g use "Password" instead of "Password:".
• Use /usr/share/metainfo for AppData files.
• Move D-Bus policy file to /usr/share/dbus-1/system.d/
• Add --with-nm-ipsec-nss-dir configure switch for Libreswan NSS database location with default value of /var/lib/ipsec/nss
• Do not add broken route to VPN gateway IP address.
• Add back import/export capability.
• update default PPPD_PLUGIN_DIR to ${libdir}/pppd/2.4.8
• Fix for user certificate password flags for connection editor.

version 1.8.2 release

Compatible with NetworkManager 1.8.0 and later.

Summary of changes since NetworkManager-l2tp 1.8.0 :

• Fixes for user certificate support.
• Remove modp1024 in default phase 1 algorithms for Libreswan as Libreswan >= 3.30 is no longer built with DH2 (modp1024) support.
• Provide --enable-libreswan-dh2 configure switch for older versions of Libreswan.
• KDE plasma-nm compatibility for "Gateway ID".

version 1.2.18 release

Compatible with NetworkManager 1.2.0 and later.

Summary of changes since NetworkManager-l2tp 1.2.16 :

• Remove modp1024 in default phase 1 algorithms for Libreswan as Libreswan >= 3.30 is no longer built with DH2 (modp1024) support.
• Provide --enable-libreswan-dh2 configure switch for older versions of Libreswan.
• KDE plasma-nm compatibility for "Gateway ID".

version 1.8.0 release

Compatible with NetworkManager 1.8.0 and later.

Summary of changes since NetworkManager-l2tp 1.2.16 :

• User TLS certificate support
  • Requires EAP-TLS patch for pppd to be applied to the pppd source code (which many Linux distributions already do).
• Machine TLS certificate support
  • Requires OpenSSL >= 1.1.0 and NSS.
• Auto detect the following TLS certificate and private key file formats by looking at the file contents and not the file extension :
  • PKCS#12 certificates.
  • X509 certificates (PEM or DER).
  • PKCS#8 private keys (PEM or DER)
  • traditional OpenSSL RSA, DSA and ECDSA private keys (PEM or DER).
• Routines to import certificates and privates keys into the system Libreswan NSS database.
• Update translations.

version 1.2.16 release

Compatible with NetworkManager 1.2.0 and later.

• Updated translations.
• Fixed label geometry in LT2P dialog box.
• Removed "Prevalent Algorithms" button
  Made the phase 1 & 2 proposals previously provided by the Prevalent Algorithms button the new default for the IKEv1 proposals. They are a merge of proposals from Win10 and macOS/iOS/iPadOS L2TP/IPsec clients instead of using the libreswan or strongswan default set of proposals. The weakest proposals that weren't common to both Win10 and iOS were dropped, but all of the strongest ones were kept.