--- gvpe/NEWS	2008/08/10 22:18:58	1.80
+++ gvpe/NEWS	2013/07/13 04:10:29	1.112
@@ -1,10 +1,85 @@
-gvpe NEWS
+GVPE NEWS
 
-TODO: udpoate dcumentation, algorithm
-todo: keepalive more aggressive?
+TODO: bridge mode, finally?
+TODO: gcm mode?
+TODO: replace ripemd160 as the only authentication hash.
+TODO: increase rsa size.
 
-2.2
-	- protocol version 0.1, compatible with older releases,
+	- INCOMPATIBLE CHANGE: no longer enable udp protocol if no other
+          protocols are enabled - this is necessary when you have nodes with
+          completely unknown protocols, to force mediated connection requests.
+        - INCOMPATIBLE CHANGE: dns transport protocol bumped to version 2.
+	- core protocol version 0.1, compatible with older releases.
+        - switch to using RSA_generate_key_ex, which is the badly documented
+          and needlessly more complicated replacement for the RSA_generate_key
+          function which is now deprecated.
+        - support additional hmac hashes: sha256 and sha512, usually truncated.
+        - change public exponent for rsa keys from 65535 to 65537, for
+          efficiency reasons - only affects new keys.
+        - nodes would sometimes declare transport endpoints valid despite
+          the protocol not being configured locally.
+        - new global configuration options: chroot, chuser, chuid, chgid,
+          to chroot to a specified or anonymous new root, and change user id.
+        - new global configuration options seed_device and seed_interval,
+          to configure another device than /dev/urandom for random seeds,
+          and to configure a regular imterval to reseed the rng.
+        - prefer inet_aton over gethostbyname, as the latter is not guaranteed
+          to "resolve" literal ip addresses.
+        - configure didn't detect openssl 1.0 because SHA1_version became private
+          (patch by TANIGUCHI Takaki).
+        - fix a bug where nodes would tell the other side that it supports
+          the same protocols as that other side, instead of its own.
+        - add zlib when found, as openssl depends on it in newer versions.
+        - work around append-bugs in uclibc by using an extra seek.
+        - new "include" directive for the config file.
+        - gvpectrl no longer evaluates any "on" directives.
+        - icmp and rawip protocols weren't upgradable to each other.
+        - major, but incremental, dns transport improvements:
+           - do not simply abort in some error cases in the dns transport,
+             but try to recover.
+           - allow lowercase/uppercase alises for base-n encodings that do
+             not rely on case.
+           - use base26 instead of base22 encoding for dns syn's, and
+             base36 instead of base22 for headers (saves one byte/packet).
+           - back off far quicker in dns tunnel when idling - increases
+             latency on an idle link somewhat, but avoids hundreds of
+             needless packets.
+           - poll more aggressively when idling in dns (poll once per
+             second as opposed to once per 5 seconds).
+           - reduce dns send payload size to allow greater rate of ack
+             messages (should help sack and ipv6).
+        - allow for ip options in rawip/icmp transports, even though gvpe
+          doesn't generate them.
+        - upgrade to libev 4 API.
+
+2.24 Sat Feb 12 05:15:48 CET 2011
+	- protocol version 0.1, compatible with older releases.
+	- due to a bug, when packets were lost, a connection could go into a
+          state where a ping/connection request from another node would be
+          ignored, leading to connections not being re-established.
+        - due to a bug, compression was almost always enabled.
+	- enable-max-mtu was actually enable-mtu, contrary to documentation.
+	- add nfmark support.
+        - add node-change script support.
+        - new DESTSI variable for node-xxx scripts.
+        - updated codingstyle a bit, declared truly static stuff as static.
+        - clarify compression docs.
+
+2.22 Sun Feb  1 17:25:28 CET 2009
+	- protocol version 0.1, compatible with older releases.
+	- enabled icmp/tcp/http-proxy protocols by default.
+	- updated copyright in program greetings.
+        - fix some configure messages.
+        - updated to libev 3.52.
+
+2.21 Wed Sep  3 06:56:27 CEST 2008
+	- protocol version 0.1, compatible with older releases.
+	- add missing ev++.h include header to tarball, which everybody
+          who tested it apparently had in their include path :(. Caught
+          by Karl Kleinpaste and Marcus Kong.
+
+2.2  Mon Sep  1 06:28:09 CEST 2008
+	- protocol version 0.1, compatible with older releases.
           but upgrade is recommended to due changed ondemand behaviour.
         - new per-node options max-ttl and max-queue.
         - convert from iom.C to libev, a high-performance event loop
@@ -21,10 +96,16 @@
           packet loss due to occasional longer drop-outs.
         - send RST when a positive window size violation is detected, but
           not in other cases, to reconnect more quickly.
-        - upgraded liblzf to version 3.2.
+        - upgraded liblzf to version 3.4.
         - dropped -fno-exceptions due to ev++.h using it.
-        - node-up/Down scripts are now run in sequence.
+        - node-up/down scripts are now run in sequence.
+        - new -q switch for gvpectrl, for when you run it often.
+        - work around the horribly inconsistent, ad-hoc, ever-changing
+          and broken texinfo syntax. YMMV. avoid texinfo.
+        - keepalive is more aggressive now, sensding ping's every 3 seconds
+          and killing the conenction after 15 seconds.
         - bugfixes.
+        - autoconf 2.69, automake 1.11.
 
 2.01 Thu Mar 29 19:26:04 CEST 2007
 	- protocol version 0.1, compatible with older releases.