Releasing 1.0.21 and 1.1pre7.

diff --git a/docs.mdwn b/docs.mdwn
index 601c7da..ac08d35 100644 (file)
--- a/docs.mdwn
+++ b/docs.mdwn
@@ -15,7 +15,7 @@ something else than the documentation says, please tell us!
 The main source of information is the manual. This text describes how to set
 up a VPN using tinc. It also contains a chapter with more technical details,
 which you may want to read, as well as the ideas behind tinc. This manual is
 The main source of information is the manual. This text describes how to set
 up a VPN using tinc. It also contains a chapter with more technical details,
 which you may want to read, as well as the ideas behind tinc. This manual is

-currently up to date with version 1.0.20.
+currently up to date with version 1.0.21.

 
 - [manual (HTML)](/documentation/tinc_toc)
 - [manual (PDF)](/documentation/tinc.pdf)
 
 - [manual (HTML)](/documentation/tinc_toc)
 - [manual (PDF)](/documentation/tinc.pdf)


@@ -29,7 +29,7 @@ The documentation for the prerelease versions of tinc 1.1 is also available:
 - [manual (HTML)](/documentation-1.1/tinc_toc)
 - [manual (PDF)](/documentation-1.1/tinc.pdf)
 - [tincd(8)](/documentation-1.1/tincd.8)
 - [manual (HTML)](/documentation-1.1/tinc_toc)
 - [manual (PDF)](/documentation-1.1/tinc.pdf)
 - [tincd(8)](/documentation-1.1/tincd.8)

-- [tincctl(8)](/documentation-1.1/tincctl.8)
+- [tinc(8)](/documentation-1.1/tinc.8)

 - [tinc.conf(5)](/documentation-1.1/tinc.conf.5)
 
 ### Examples
 - [tinc.conf(5)](/documentation-1.1/tinc.conf.5)
 
 ### Examples

diff --git a/download.mdwn b/download.mdwn
index ef69fe0..facf5f6 100644 (file)
--- a/download.mdwn
+++ b/download.mdwn
@@ -12,28 +12,28 @@ packages you should contact its maintainer.
 
 ### Latest stable release
 
 
 ### Latest stable release
 

-[[!inline  pages="news/release-1.0.20" template=newsitemnoheader feeds="no"]]
+[[!inline  pages="news/release-1.0.21" template=newsitemnoheader feeds="no"]]

 
 

-<a name="1.0.20"></a><table>
-<tr><td>**Version**<td>1.0.20
+<a name="1.0.21"></a><table>
+<tr><td>**Version**<td>1.0.21

 <tr><td>**Source**<td>
 <tr><td>**Source**<td>

-[tinc-1.0.20.tar.gz](/packages/tinc-1.0.20.tar.gz)
-([sig](/packages/tinc-1.0.20.tar.gz.sig))
+[tinc-1.0.21.tar.gz](/packages/tinc-1.0.21.tar.gz)
+([sig](/packages/tinc-1.0.21.tar.gz.sig))

 <tr><td>**Packages**<td>
 <tr><td>**Packages**<td>

-[Windows XP/Vista/7/8](/packages/windows/tinc-1.0.20-install.exe)
+[Windows XP/Vista/7/8](/packages/windows/tinc-1.0.21-install.exe)

 </table>
 
 ### Latest pre-release from the 1.1 branch
 
 </table>
 
 ### Latest pre-release from the 1.1 branch
 

-[[!inline  pages="news/release-1.1pre6" template=newsitemnoheader feeds="no"]]
+[[!inline  pages="news/release-1.1pre7" template=newsitemnoheader feeds="no"]]

 
 

-<a name="1.1pre6"></a><table>
-<tr><td>**Version**<td>1.1pre6
+<a name="1.1pre7"></a><table>
+<tr><td>**Version**<td>1.1pre7

 <tr><td>**Source**<td>
 <tr><td>**Source**<td>

-[tinc-1.1pre6.tar.gz](/packages/tinc-1.1pre6.tar.gz)
-([sig](/packages/tinc-1.1pre6.tar.gz.sig))
+[tinc-1.1pre7.tar.gz](/packages/tinc-1.1pre7.tar.gz)
+([sig](/packages/tinc-1.1pre7.tar.gz.sig))

 <tr><td>**Packages**<td>
 <tr><td>**Packages**<td>

-[Windows XP/Vista/7/8](/packages/windows/tinc-1.1pre6-install.exe)
+[Windows XP/Vista/7/8](/packages/windows/tinc-1.1pre7-install.exe)

 </table>
 
 ### Distributions providing tinc
 </table>
 
 ### Distributions providing tinc


@@ -64,13 +64,25 @@ using one of these packages.
 
 ### Older versions
 
 
 ### Older versions
 

+<a name="1.0.20"></a><table>
+<tr><td>**Version**<td>1.0.20
+<tr><td>**Source**<td>
+[tinc-1.0.20.tar.gz](/packages/tinc-1.0.20.tar.gz)
+([sig](/packages/tinc-1.0.20.tar.gz.sig))
+</table>
+
+<a name="1.1pre6"></a><table>
+<tr><td>**Version**<td>1.1pre6
+<tr><td>**Source**<td>
+[tinc-1.1pre6.tar.gz](/packages/tinc-1.1pre6.tar.gz)
+([sig](/packages/tinc-1.1pre6.tar.gz.sig))
+</table>
+

 <a name="1.1pre5"></a><table>
 <tr><td>**Version**<td>1.1pre5
 <tr><td>**Source**<td>
 [tinc-1.1pre5.tar.gz](/packages/tinc-1.1pre5.tar.gz)
 ([sig](/packages/tinc-1.1pre5.tar.gz.sig))
 <a name="1.1pre5"></a><table>
 <tr><td>**Version**<td>1.1pre5
 <tr><td>**Source**<td>
 [tinc-1.1pre5.tar.gz](/packages/tinc-1.1pre5.tar.gz)
 ([sig](/packages/tinc-1.1pre5.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7/8](/packages/windows/tinc-1.1pre5-install.exe)

 </table>
 
 <a name="1.1pre4"></a><table>
 </table>
 
 <a name="1.1pre4"></a><table>


@@ -78,8 +90,6 @@ using one of these packages.
 <tr><td>**Source**<td>
 [tinc-1.1pre4.tar.gz](/packages/tinc-1.1pre4.tar.gz)
 ([sig](/packages/tinc-1.1pre4.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.1pre4.tar.gz](/packages/tinc-1.1pre4.tar.gz)
 ([sig](/packages/tinc-1.1pre4.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7/8](/packages/windows/tinc-1.1pre4-install.exe)

 </table>
 
 <a name="1.1pre3"></a><table>
 </table>
 
 <a name="1.1pre3"></a><table>


@@ -87,10 +97,6 @@ using one of these packages.
 <tr><td>**Source**<td>
 [tinc-1.1pre3.tar.gz](/packages/tinc-1.1pre3.tar.gz)
 ([sig](/packages/tinc-1.1pre3.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.1pre3.tar.gz](/packages/tinc-1.1pre3.tar.gz)
 ([sig](/packages/tinc-1.1pre3.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7/8](/packages/windows/tinc-1.1pre3-install.exe)
-<tr><td>**Remarks**<td>
-The Windows binary fails to read packets from the TAP adapter.

 </table>
 
 <a name="1.0.19"></a><table>
 </table>
 
 <a name="1.0.19"></a><table>


@@ -98,8 +104,6 @@ The Windows binary fails to read packets from the TAP adapter.
 <tr><td>**Source**<td>
 [tinc-1.0.19.tar.gz](/packages/tinc-1.0.19.tar.gz)
 ([sig](/packages/tinc-1.0.19.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.19.tar.gz](/packages/tinc-1.0.19.tar.gz)
 ([sig](/packages/tinc-1.0.19.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7/8](/packages/windows/tinc-1.0.19-install.exe)

 </table>
 
 <a name="1.0.18"></a><table>
 </table>
 
 <a name="1.0.18"></a><table>


@@ -107,8 +111,6 @@ The Windows binary fails to read packets from the TAP adapter.
 <tr><td>**Source**<td>
 [tinc-1.0.18.tar.gz](/packages/tinc-1.0.18.tar.gz)
 ([sig](/packages/tinc-1.0.18.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.18.tar.gz](/packages/tinc-1.0.18.tar.gz)
 ([sig](/packages/tinc-1.0.18.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.18-install.exe)

 </table>
 
 <a name="1.0.17"></a><table>
 </table>
 
 <a name="1.0.17"></a><table>


@@ -116,10 +118,6 @@ The Windows binary fails to read packets from the TAP adapter.
 <tr><td>**Source**<td>
 [tinc-1.0.17.tar.gz](/packages/tinc-1.0.17.tar.gz)
 ([sig](/packages/tinc-1.0.17.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.17.tar.gz](/packages/tinc-1.0.17.tar.gz)
 ([sig](/packages/tinc-1.0.17.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.17-install.exe)
-<tr><td>**Remarks**<td>
-IPv6 will fail to work when `Mode = switch`. The workaround is to set `DecrementTTL = no`.

 </table>
 
 <a name="1.0.16"></a><table>
 </table>
 
 <a name="1.0.16"></a><table>


@@ -127,8 +125,6 @@ IPv6 will fail to work when `Mode = switch`. The workaround is to set `Decrement
 <tr><td>**Source**<td>
 [tinc-1.0.16.tar.gz](/packages/tinc-1.0.16.tar.gz)
 ([sig](/packages/tinc-1.0.16.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.16.tar.gz](/packages/tinc-1.0.16.tar.gz)
 ([sig](/packages/tinc-1.0.16.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.16-install.exe)

 </table>
 
 <a name="1.1pre2"></a><table>
 </table>
 
 <a name="1.1pre2"></a><table>


@@ -136,8 +132,6 @@ IPv6 will fail to work when `Mode = switch`. The workaround is to set `Decrement
 <tr><td>**Source**<td>
 [tinc-1.1pre2.tar.gz](/packages/tinc-1.1pre2.tar.gz)
 ([sig](/packages/tinc-1.1pre2.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.1pre2.tar.gz](/packages/tinc-1.1pre2.tar.gz)
 ([sig](/packages/tinc-1.1pre2.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.1pre2-install.exe)

 </table>
 
 <a name="1.0.15"></a><table>
 </table>
 
 <a name="1.0.15"></a><table>


@@ -145,8 +139,6 @@ IPv6 will fail to work when `Mode = switch`. The workaround is to set `Decrement
 <tr><td>**Source**<td>
 [tinc-1.0.15.tar.gz](/packages/tinc-1.0.15.tar.gz)
 ([sig](/packages/tinc-1.0.15.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.15.tar.gz](/packages/tinc-1.0.15.tar.gz)
 ([sig](/packages/tinc-1.0.15.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.15-install.exe)

 </table>
 
 <a name="1.1pre1"></a><table>
 </table>
 
 <a name="1.1pre1"></a><table>


@@ -154,10 +146,6 @@ IPv6 will fail to work when `Mode = switch`. The workaround is to set `Decrement
 <tr><td>**Source**<td>
 [tinc-1.1pre1.tar.gz](/packages/tinc-1.1pre1.tar.gz)
 ([sig](/packages/tinc-1.1pre1.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.1pre1.tar.gz](/packages/tinc-1.1pre1.tar.gz)
 ([sig](/packages/tinc-1.1pre1.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.1pre1-install.exe)
-<tr><td>**Remarks**<td>
-One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=tinc;a=blob_plain;f=src/tincctl.h;h=114b931e5c088639a025b8ed7ac22f7240cd2c2d;hb=e4f65db89726ac06ba7e787d420db4422d9a6e98) as `src/tincctl.h` before compiling.

 </table>
 
 <a name="1.0.14"></a><table>
 </table>
 
 <a name="1.0.14"></a><table>


@@ -165,8 +153,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.14.tar.gz](/packages/tinc-1.0.14.tar.gz)
 ([sig](/packages/tinc-1.0.14.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.14.tar.gz](/packages/tinc-1.0.14.tar.gz)
 ([sig](/packages/tinc-1.0.14.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.14-install.exe)

 </table>
 
 <a name="1.0.13"></a><table>
 </table>
 
 <a name="1.0.13"></a><table>


@@ -174,8 +160,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.13.tar.gz](/packages/tinc-1.0.13.tar.gz)
 ([sig](/packages/tinc-1.0.13.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.13.tar.gz](/packages/tinc-1.0.13.tar.gz)
 ([sig](/packages/tinc-1.0.13.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.13-install.exe)

 </table>
 
 <a name="1.0.12"></a><table>
 </table>
 
 <a name="1.0.12"></a><table>


@@ -183,8 +167,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.12.tar.gz](/packages/tinc-1.0.12.tar.gz)
 ([sig](/packages/tinc-1.0.12.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.12.tar.gz](/packages/tinc-1.0.12.tar.gz)
 ([sig](/packages/tinc-1.0.12.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.12-install.exe)

 </table>
 
 <a name="1.0.11"></a><table>
 </table>
 
 <a name="1.0.11"></a><table>


@@ -192,8 +174,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.11.tar.gz](/packages/tinc-1.0.11.tar.gz)
 ([sig](/packages/tinc-1.0.11.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.11.tar.gz](/packages/tinc-1.0.11.tar.gz)
 ([sig](/packages/tinc-1.0.11.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.11-install.exe)

 </table>
 
 <a name="1.0.10"></a><table>
 </table>
 
 <a name="1.0.10"></a><table>


@@ -201,8 +181,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.10.tar.gz](/packages/tinc-1.0.10.tar.gz)
 ([sig](/packages/tinc-1.0.10.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.10.tar.gz](/packages/tinc-1.0.10.tar.gz)
 ([sig](/packages/tinc-1.0.10.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows XP/Vista/7](/packages/windows/tinc-1.0.10-install.exe)

 </table>
 
 <a name="1.0.9"></a><table>
 </table>
 
 <a name="1.0.9"></a><table>


@@ -210,8 +188,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.9.tar.gz](/packages/tinc-1.0.9.tar.gz)
 ([sig](/packages/tinc-1.0.9.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.9.tar.gz](/packages/tinc-1.0.9.tar.gz)
 ([sig](/packages/tinc-1.0.9.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.9-install.exe)

 </table>
 
 <a name="1.0.8"></a><table>
 </table>
 
 <a name="1.0.8"></a><table>


@@ -219,11 +195,6 @@ One header file is missing, save [this file](http://tinc-vpn.org/git/browse?p=ti
 <tr><td>**Source**<td>
 [tinc-1.0.8.tar.gz](/packages/tinc-1.0.8.tar.gz)
 ([sig](/packages/tinc-1.0.8.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.8.tar.gz](/packages/tinc-1.0.8.tar.gz)
 ([sig](/packages/tinc-1.0.8.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.8-install.exe)
-<tr><td>**Extra**<td>
-When compiling with an old version of GCC, try the following patch, kindly provided by "Borg":
-[tinc-1.0.8-gcc-2.95.patch](/contrib/tinc-1.0.8-gcc-2.95.patch).

 </table>
 
 <a name="1.0.7"></a><table>
 </table>
 
 <a name="1.0.7"></a><table>


@@ -231,11 +202,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.7.tar.gz](/packages/tinc-1.0.7.tar.gz)
 ([sig](/packages/tinc-1.0.7.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.7.tar.gz](/packages/tinc-1.0.7.tar.gz)
 ([sig](/packages/tinc-1.0.7.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[OpenBSD i386](/packages/tincd-1.0.7-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.7-openbsd-i386-static.gz.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.7-install.exe)

 </table>
 
 <a name="1.0.6"></a><table>
 </table>
 
 <a name="1.0.6"></a><table>


@@ -243,15 +209,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.6.tar.gz](/packages/tinc-1.0.6.tar.gz)
 ([sig](/packages/tinc-1.0.6.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.6.tar.gz](/packages/tinc-1.0.6.tar.gz)
 ([sig](/packages/tinc-1.0.6.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[FreeBSD i386](/packages/tincd-1.0.6-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0.6-freebsd-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0.6-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.6-openbsd-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0.6-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.6-netbsd-i386-static.gz.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.6-install.exe)

 </table>
 
 <a name="1.0.5"></a><table>
 </table>
 
 <a name="1.0.5"></a><table>


@@ -259,12 +216,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.5.tar.gz](/packages/tinc-1.0.5.tar.gz)
 ([sig](/packages/tinc-1.0.5.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.5.tar.gz](/packages/tinc-1.0.5.tar.gz)
 ([sig](/packages/tinc-1.0.5.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[FreeBSD i386](/packages/tincd-1.0.5-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0.5-freebsd-i386-static.gz.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.5-install.exe),
-[Debian on Nokia 770](/packages/debian/tinc_1.0.5-1_armel.deb)

 </table>
 
 <a name="1.0.4"></a><table>
 </table>
 
 <a name="1.0.4"></a><table>


@@ -272,19 +223,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.4.tar.gz](/packages/tinc-1.0.4.tar.gz)
 ([sig](/packages/tinc-1.0.4.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.4.tar.gz](/packages/tinc-1.0.4.tar.gz)
 ([sig](/packages/tinc-1.0.4.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux x86_64](/packages/tincd-1.0.4-linux-x86_64-static.gz)
-([sig](/packages/tincd-1.0.4-linux-x86_64-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0.4-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0.4-freebsd-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0.4-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.4-netbsd-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0.4-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.4-openbsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0.4-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.4-solaris-sparc32-dynamic.gz.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.4-install.exe)

 </table>
 
 <a name="1.0.3"></a><table>
 </table>
 
 <a name="1.0.3"></a><table>


@@ -292,22 +230,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.3.tar.gz](/packages/tinc-1.0.3.tar.gz)
 ([sig](/packages/tinc-1.0.3.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.3.tar.gz](/packages/tinc-1.0.3.tar.gz)
 ([sig](/packages/tinc-1.0.3.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0.3-linux-i386-static.gz)
-([sig](/packages/tincd-1.0.3-linux-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0.3-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0.3-freebsd-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0.3-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.3-netbsd-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0.3-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.3-openbsd-i386-static.gz.sig)),
-[Darwin powerpc](/packages/tincd-1.0.3-darwin-powerpc-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.3-darwin-powerpc-dynamic.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0.3-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.3-solaris-sparc32-dynamic.gz.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0.3-install.exe),
-[OpenWRT](/packages/openwrt/tinc_1.0.3_mipsel.ipk)

 </table>
 
 <a name="1.0.2"></a><table>
 </table>
 
 <a name="1.0.2"></a><table>


@@ -315,18 +237,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.2.tar.gz](/packages/tinc-1.0.2.tar.gz)
 ([sig](/packages/tinc-1.0.2.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.2.tar.gz](/packages/tinc-1.0.2.tar.gz)
 ([sig](/packages/tinc-1.0.2.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0.2-linux-i386-static.gz)
-([sig](/packages/tincd-1.0.2-linux-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0.2-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.2-netbsd-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0.2-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.2-openbsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0.2-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.2-solaris-sparc32-dynamic.gz.sig)),
-<tr><td>**Packages**<td>
-[Slackware 9.1](/packages/slackware/tinc-1.0.2-i486-2.tgz),
-[Windows 2000/XP](/packages/windows/tinc-1.0.2-install.exe)

 </table>
 
 <a name="1.0.1"></a><table>
 </table>
 
 <a name="1.0.1"></a><table>


@@ -334,22 +244,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.1.tar.gz](/packages/tinc-1.0.1.tar.gz)
 ([sig](/packages/tinc-1.0.1.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.1.tar.gz](/packages/tinc-1.0.1.tar.gz)
 ([sig](/packages/tinc-1.0.1.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0.1-linux-i386-static.gz)
-([sig](/packages/tincd-1.0.1-linux-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0.1-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.1-netbsd-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0.1-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0.1-openbsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0.1-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.1-solaris-sparc32-dynamic.gz.sig)),
-[Darwin powerpc](/packages/tincd-1.0.1-darwin-powerpc-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0.1-darwin-powerpc-dynamic.gz.sig)),
-[Windows 2000/XP](/packages/tincd-1.0.1-windows-i386-static.exe)
-([sig](/packages/tincd-1.0.1-windows-i386-static.exe.sig)),
-<tr><td>**Packages**<td>
-[Slackware 9.1](/packages/slackware/tinc-1.0.1-i486-1.tgz),
-[Windows 2000/XP](/packages/windows/tinc-1.0.1-install.exe)

 </table>
 
 <a name="1.0"></a><table>
 </table>
 
 <a name="1.0"></a><table>


@@ -357,23 +251,6 @@ When compiling with an old version of GCC, try the following patch, kindly provi
 <tr><td>**Source**<td>
 [tinc-1.0.tar.gz](/packages/tinc-1.0.tar.gz)
 ([sig](/packages/tinc-1.0.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0.tar.gz](/packages/tinc-1.0.tar.gz)
 ([sig](/packages/tinc-1.0.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0-linux-i386-static.gz)
-([sig](/packages/tincd-1.0-linux-i386-static.gz.sig)),
-[NetBSD i386](/packages/tincd-1.0-netbsd-i386-static.gz)
-([sig](/packages/tincd-1.0-netbsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0-solaris-sparc32-dynamic.gz.sig)),
-[Darwin powerpc](/packages/tincd-1.0-darwin-powerpc-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0-darwin-powerpc-dynamic.gz.sig)),
-[Windows 2000/XP](/packages/tincd-1.0-windows-i386-static.exe)
-([sig](/packages/tincd-1.0-windows-i386-static.exe.sig)),
-<tr><td>**Packages**<td>
-[Windows 2000/XP](/packages/windows/tinc-1.0-install.exe)
-<tr><td>**Remarks**<td>
-When compiling under OpenBSD, you will need a small
-[patch](/packages/tinc-1.0-openbsd-patch.gz)
-([sig](/packages/tinc-1.0-openbsd-patch.gz.sig)).

 </table>
 
 <a name="1.0pre8"></a><table>
 </table>
 
 <a name="1.0pre8"></a><table>


@@ -381,20 +258,6 @@ When compiling under OpenBSD, you will need a small
 <tr><td>**Source**<td>
 [tinc-1.0pre8.tar.gz](/packages/tinc-1.0pre8.tar.gz)
 ([sig](/packages/tinc-1.0pre8.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre8.tar.gz](/packages/tinc-1.0pre8.tar.gz)
 ([sig](/packages/tinc-1.0pre8.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre8-linux-i386-static.gz)
-([sig](/packages/tincd-1.0pre8-linux-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0pre8-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre8-openbsd-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0pre8-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre8-freebsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0pre8-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0pre8-solaris-sparc32-dynamic.gz.sig)),
-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre8-1_i386.deb)
-([woody](/packages/debian/tinc_1.0pre8-1.woody_i386.deb)),
-[Slackware i386](/packages/slackware/tinc-1.0pre8-i386-1.tgz)
-([Slackware 9](/packages/slackware/tinc-1.0pre8-i386-slackware9.tgz)),

 </table>
 
 <a name="1.0pre7"></a><table>
 </table>
 
 <a name="1.0pre7"></a><table>


@@ -402,19 +265,6 @@ When compiling under OpenBSD, you will need a small
 <tr><td>**Source**<td>
 [tinc-1.0pre7.tar.gz](/packages/tinc-1.0pre7.tar.gz)
 ([sig](/packages/tinc-1.0pre7.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre7.tar.gz](/packages/tinc-1.0pre7.tar.gz)
 ([sig](/packages/tinc-1.0pre7.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre7-linux-i386-static.gz)
-([sig](/packages/tincd-1.0pre7-linux-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0pre7-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre7-openbsd-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0pre7-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre7-freebsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0pre7-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0pre7-solaris-sparc32-dynamic.gz.sig))
-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre7-1_i386.deb),
-[Redhat](/packages/redhat/tinc-1.0pre7-1.i386.rpm),
-[Slackware i386](/packages/slackware/tinc-1.0pre7-i386-1.tgz)

 </table>
 
 <a name="1.0pre6"></a><table>
 </table>
 
 <a name="1.0pre6"></a><table>


@@ -422,19 +272,6 @@ When compiling under OpenBSD, you will need a small
 <tr><td>**Source**<td>
 [tinc-1.0pre6.tar.gz](/packages/tinc-1.0pre6.tar.gz)
 ([sig](/packages/tinc-1.0pre6.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre6.tar.gz](/packages/tinc-1.0pre6.tar.gz)
 ([sig](/packages/tinc-1.0pre6.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre6-linux-i386-static.gz)
-([sig](/packages/tincd-1.0pre6-linux-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0pre6-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre6-openbsd-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0pre6-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre6-freebsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0pre6-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0pre6-solaris-sparc32-dynamic.gz.sig))
-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre6-1_i386.deb)
-<tr><td>**Remarks**<td>
-Doesn't like signals and prefixlengths which are not divisible by 8.

 </table>
 
 <a name="1.0pre5"></a><table>
 </table>
 
 <a name="1.0pre5"></a><table>


@@ -442,20 +279,6 @@ Doesn't like signals and prefixlengths which are not divisible by 8.
 <tr><td>**Source**<td>
 [tinc-1.0pre5.tar.gz](/packages/tinc-1.0pre5.tar.gz)
 ([sig](/packages/tinc-1.0pre5.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre5.tar.gz](/packages/tinc-1.0pre5.tar.gz)
 ([sig](/packages/tinc-1.0pre5.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre5-linux-i386-static.gz)
-([sig](/packages/tincd-1.0pre5-linux-i386-static.gz.sig)),
-[OpenBSD i386](/packages/tincd-1.0pre5-openbsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre5-openbsd-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0pre5-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre5-freebsd-i386-static.gz.sig)),
-[Solaris sparc32](/packages/tincd-1.0pre5-solaris-sparc32-dynamic.gz)<SUP>[*](#dynamic)</SUP>
-([sig](/packages/tincd-1.0pre5-solaris-sparc32-dynamic.gz.sig))
-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre5-1_i386.deb),
-[Debian potato i386](/packages/debian/tinc_1.0pre5-1.potato_i386.deb)
-<tr><td>**Remarks**<td>
-Blocking connect()s.

 </table>
 
 <a name="1.0pre4"></a><table>
 </table>
 
 <a name="1.0pre4"></a><table>


@@ -463,13 +286,6 @@ Blocking connect()s.
 <tr><td>**Source**<td>
 [tinc-1.0pre4.tar.gz](/packages/tinc-1.0pre4.tar.gz)
 ([sig](/packages/tinc-1.0pre4.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre4.tar.gz](/packages/tinc-1.0pre4.tar.gz)
 ([sig](/packages/tinc-1.0pre4.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre4-i386-static.gz)
-([sig](/packages/tincd-1.0pre4-i386-static.gz.sig)),
-[FreeBSD i386](/packages/tincd-1.0pre4-freebsd-i386-static.gz)
-([sig](/packages/tincd-1.0pre4-freebsd-i386-static.gz.sig)),
-<tr><td>**Remarks**<td>
-Contains key expiry bug, see [[FAQ|faq#keyexpire]].

 </table>
 
 <a name="1.0pre3"></a><table>
 </table>
 
 <a name="1.0pre3"></a><table>


@@ -477,12 +293,6 @@ Contains key expiry bug, see [[FAQ|faq#keyexpire]].
 <tr><td>**Source**<td>
 [tinc-1.0pre3.tar.gz](/packages/tinc-1.0pre3.tar.gz)
 ([sig](/packages/tinc-1.0pre3.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre3.tar.gz](/packages/tinc-1.0pre3.tar.gz)
 ([sig](/packages/tinc-1.0pre3.tar.gz.sig))

-<tr><td>**Static binaries**<td>
-[Linux i386](/packages/tincd-1.0pre3-i386-static.gz)
-([sig](/packages/tincd-1.0pre3-i386-static.gz.sig)),
-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre3-1_i386.deb),
-[Debian potato i386](/packages/debian/tinc_1.0pre3-1potato_i386.deb)

 </table>
 
 <a name="1.0pre2"></a><table>
 </table>
 
 <a name="1.0pre2"></a><table>


@@ -490,11 +300,6 @@ Contains key expiry bug, see [[FAQ|faq#keyexpire]].
 <tr><td>**Source**<td>
 [tinc-1.0pre2.tar.gz](/packages/tinc-1.0pre2.tar.gz)
 ([sig](/packages/tinc-1.0pre2.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre2.tar.gz](/packages/tinc-1.0pre2.tar.gz)
 ([sig](/packages/tinc-1.0pre2.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre2-1_i386.deb),
-[Redhat i386](/packages/redhat/tinc-1.0pre2-1.i386.rpm)
-<tr><td>**Remarks**<td>
-Contains security hole, see [[news|news/2000-09-10]].

 </table>
 
 <a name="1.0pre1"></a><table>
 </table>
 
 <a name="1.0pre1"></a><table>


@@ -502,11 +307,6 @@ Contains security hole, see [[news|news/2000-09-10]].
 <tr><td>**Source**<td>
 [tinc-1.0pre1.tar.gz](/packages/tinc-1.0pre1.tar.gz)
 ([sig](/packages/tinc-1.0pre1.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-1.0pre1.tar.gz](/packages/tinc-1.0pre1.tar.gz)
 ([sig](/packages/tinc-1.0pre1.tar.gz.sig))

-<tr><td>**Packages**<td>
-[Debian i386](/packages/debian/tinc_1.0pre1-0.4_i386.deb),
-[Redhat i386](/packages/redhat/tinc-1.0pre1-2.i386.rpm)
-<tr><td>**Remarks**<td>
-Contains security hole, see [[news|news/2000-09-10]].

 </table>
 
 <a name="0.3.3"></a><table>
 </table>
 
 <a name="0.3.3"></a><table>


@@ -514,8 +314,6 @@ Contains security hole, see [[news|news/2000-09-10]].
 <tr><td>**Source**<td>
 [tinc-0.3.3.tar.gz](/packages/tinc-0.3.3.tar.gz)
 ([sig](/packages/tinc-0.3.3.tar.gz.sig))
 <tr><td>**Source**<td>
 [tinc-0.3.3.tar.gz](/packages/tinc-0.3.3.tar.gz)
 ([sig](/packages/tinc-0.3.3.tar.gz.sig))

-<tr><td>**Remarks**<td>
-Contains security hole, see [[news|news/2000-09-10]].

 </table>
 
 <a name="0.2.19"></a><table>
 </table>
 
 <a name="0.2.19"></a><table>

diff --git a/index.mdwn b/index.mdwn
index 00dd7dd..cea3ff2 100644 (file)
--- a/index.mdwn
+++ b/index.mdwn
@@ -1,8 +1,8 @@
 # Welcome to tinc!
 
 # Welcome to tinc!
 

-### Latest stable version: [[1.0.20|download]]
+### Latest stable version: [[1.0.21|download]]

 
 

-Latest prerelease from the 1.1 branch: [[1.1pre6|download]]
+Latest prerelease from the 1.1 branch: [[1.1pre7|download]]

 
 ### Latest news:
 
 
 ### Latest news:
 

diff --git a/news/release-1.0.21.mdwn b/news/release-1.0.21.mdwn
new file mode 100644 (file)
index 0000000..8d15cd0
--- /dev/null
+++ b/news/release-1.0.21.mdwn
@@ -0,0 +1,8 @@
+[[!meta author="guus"]]
+[[!meta date="April 22nd 2013"]]
+
+Version 1.0.21 released.
+
+ * Drop packets forwarded via TCP if they are too big (CVE-2013-1428).
+
+Thanks to Martin Schobert for auditing tinc and reporting this vulnerability.

diff --git a/news/release-1.1pre7.mdwn b/news/release-1.1pre7.mdwn
new file mode 100644 (file)
index 0000000..034f52c
--- /dev/null
+++ b/news/release-1.1pre7.mdwn
@@ -0,0 +1,12 @@
+[[!meta author="guus"]]
+[[!meta date="April 22th 2013"]]
+
+Version 1.1pre7 released.
+
+ * Fixed large latencies on Windows.
+ * Renamed the tincctl tool to tinc.
+ * Simplified changing the configuration using the tinc tool.
+ * Added a full description of the ExperimentalProtocol to the manual.
+ * Drop packets forwarded via TCP if they are too big (CVE-2013-1428).
+
+Thanks to Martin Schobert for auditing tinc and reporting the vulnerability.

diff --git a/security.mdwn b/security.mdwn
index 91c5647..d6cdea0 100644 (file)
--- a/security.mdwn
+++ b/security.mdwn
@@ -1,3 +1,14 @@
+## Security advisories
+
+The following list contains advisories for security issues in tinc in old versions:
+
+- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1428](CVE-2013-1428):
+  to be published.
+- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-1755](CVE-2002-1755):
+  tinc 1.0pre3 and 1.0pre4 VPN do not authenticate forwarded packets, which allows remote attackers to inject data into user sessions without detection, and possibly control the data contents via cut-and-paste attacks on CBC. 
+- [https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1505](CVE-2001-1505):
+  tinc 1.0pre3 and 1.0pre4 allow remote attackers to inject data into user sessions by sniffing and replaying packets. 
+

 ## Possible weak keys generated by tinc on Debian (and derivates) due to a security bug in Debian's OpenSSL packages
 
 For those who run tinc on Debian or Debian-based distributions like
 ## Possible weak keys generated by tinc on Debian (and derivates) due to a security bug in Debian's OpenSSL packages
 
 For those who run tinc on Debian or Debian-based distributions like


@@ -22,7 +33,7 @@ well. Regenerate any keying material that you have exchanged via
 your tinc VPN if any of the nodes was running on an affected
 platform.
 
 your tinc VPN if any of the nodes was running on an affected
 platform.
 

-## Security issues in tinc
+## Known security issues in tinc 1.0.x

 
 Although tinc uses the OpenSSL library, it does not use the SSL protocol
 to establish connections between daemons. The reasons for this were:
 
 Although tinc uses the OpenSSL library, it does not use the SSL protocol
 to establish connections between daemons. The reasons for this were:


@@ -37,10 +48,8 @@ René Korthaus, Andreas Hübner, Felix Stein and Wladimir Paulsen have also look
 and have provided a more in-depth analysis of the most critical weaknesses.
 In the interest of full disclosure we will list the known weaknesses below.
 
 and have provided a more in-depth analysis of the most critical weaknesses.
 In the interest of full disclosure we will list the known weaknesses below.
 

-For tinc 2.0 and later we will use a standard protocol like SSH or TLS to perform authentication.
-For the encapsulated packets, we will consider protocols like DTLS, but due to the specific needs of a peer-to-peer VPN,
-we might also keep our own protocol, but update it to current security standards.
-We might also release an interim version that just fixes the vulnerabilities in tinc 1.x in the near future.
+Tinc 1.1pre3 and later will use a new protocol that fixes all these issues,
+and that is similar to (D)TLS with a strong cipher suite.

 
 ### Predictable IV
 
 
 ### Predictable IV