NEWS: Add note about IKEv2 signature scheme constraints

diff --git a/NEWS b/NEWS
index 100856e0a57e5d651245f83500434731a92d9dda..fcb89f09ea0615b27dcd1c561af2ad9078ec2e53 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,10 @@ strongswan-5.4.0
   on different selectors via VICI/swanctl.  Unless disabled in strongswan.conf
   the charon daemon will follow redirect requests received from servers.
 
+- The ike: prefix enables the explicit configuration of signature scheme
+  constraints against IKEv2 authentication in rightauth, which allows the use
+  of different signature schemes for trustchain verification and authentication.
+
 - For the vici plugin a Vici:Session Perl CPAN module has been added to allow
   Perl applications to control and/or monitor the IKE daemon using the VICI
   interface, similar to the existing Python egg or Ruby gem.