Upgrading
---------

Warning ! If you are upgrading from a 2.2.x to 2.4.y, you MUST upgrade
the servers (nufw and nuauth) before the clients.

You must ensure that nufw and nuauth are using the same version.

Newer nuauth server support both 2.2 and 2.4 clients, but 2.4 clients
support only nuauth 2.4 for the server.

Since version 2.4, configuration has changed:

 * configuration for nuauth supports includes and has been split into multiple files
   in /etc/nufw/nuauth.d directory
 * all components now have configuration files (including nufw and nutcpc)

TLS and certificates
--------------------

By default, NuFW requires a valid certificate authority, and valid certificates to
be installed on all components (especially for nuauth and nufw).
See http://nufw.org/docs/handbook22.html#hardening for details.

To make the installation easier, the Debian package uses the non-strict mode
by default.

The following modifications have been done (revert them to use strict mode):

In file /etc/default/nufw, change ::

 NUFW_OPTIONS=""

to ::

 NUFW_OPTIONS="-s"

In file /etc/nufw/nuauth.conf, change ::

 nuauth_tls_request_cert=2
 # nuauth_tls_disable_nufw_fqdn_check=0

to ::

 nuauth_tls_request_cert=1
 nuauth_tls_disable_nufw_fqdn_check=1


Documentation
-------------

NuFW handbook (containing the installation guide, and more information) can
be found at:

http://nufw.org/docs/handbook22.html

PDF version: http://nufw.org/docs/handbook22.pdf

The handbook is not packaged in Debian due to the license (Creative
Commons by-nc-sa 3.0).

An installation guide for Debian can be found at:
http://software.inl.fr/trac/wiki/nufw_install_debian


More links:
Documentation, links, forums, etc.:
  http://software.inl.fr/trac/wiki/EdenWall/NuFW

 -- Pierre Chifflier <pollux@debian.org>  Tue, 25 Nov 2008 11:45:25 +0100

