Updated NEWS

diff --git a/NEWS b/NEWS
index 1d69cd8220d859e717b0d74d1262f90f604545f9..8de6cac4ec03d9a901c6ef8d6f4ebd81c100187c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -29,6 +29,14 @@ strongswan-5.4.0
   The port range must map to a port mask, though since the kernel does not
   support arbitrary ranges.
 
+- The vici plugin allows the configuration of IPv4 and IPv6 address ranges
+  in local and remote traffic selectors. Since both the Linux kernel and
+  iptables cannot handle arbitrary ranges, address ranges are mapped to the next
+  larger CIDR subnet by the kernel-netlink and updown plugins, respectively.
+
+- Implemented IKEv1 IPv4/IPv6 address subnet and range identities that can be
+  used as owners of shared secrets.
+
 
 strongswan-5.3.5
 ----------------