NEWS: Introduce make-before-break reauthentication

diff --git a/NEWS b/NEWS
index 1bce48d695d02b5c8383f00ffd5be67b7e1657c7..976f34c181d5b60df96fb87f05a8a12a7b0a9b97 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,12 @@
+- Added support for IKEv2 make-before-break reauthentication. By using a global
+  CHILD_SA reqid allocation mechanism, charon supports overlapping CHILD_SAs.
+  This allows the use of make-before-break instead of the previously supported
+  break-before-make reauthentication, avoiding connectivity gaps during that
+  procedure. As the new mechanism may fail with peers not supporting it (such
+  as any previous strongSwan release) it must be explicitly enabled using
+  the charon.make_before_break strongswan.conf option.
+
+
 strongswan-5.2.2
 ----------------