From: Martin Willi <martin@revosec.ch>
Date: Wed, 5 Jan 2011 17:15:44 +0000 (+0100)
Subject: Added constraints plugin NEWS
X-Git-Tag: 4.5.1~138
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=77eee25f5aa4e5be5642f07d886a99c59b3bd0f1;p=thirdparty%2Fstrongswan.git

Added constraints plugin NEWS
---

diff --git a/NEWS b/NEWS
index 572e752c6e..1bc80c7593 100644
--- a/NEWS
+++ b/NEWS
@@ -51,6 +51,12 @@ strongswan-4.5.1
   or drop messages and much more. It is enabled using the --enable-conftest
   ./configure switch.
 
+- The new libstrongswan constraints plugin provides advanced X.509 constraint
+  checking. In additon to X.509 pathLen constraints, the plugin checks for
+  nameConstraints and certificatePolicies, including policyMappings and
+  policyConstraints. The x509 certificate plugin and the pki tool have been
+  enhanced to support these extensions.
+
 strongswan-4.5.0
 ----------------