From: Martin Willi <martin@revosec.ch>
Date: Mon, 31 Mar 2014 09:23:22 +0000 (+0200)
Subject: NEWS: Add acert and pki changes for 5.1.3
X-Git-Tag: 5.1.3rc1~24^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8101e6aa17228164bf3b7d4dc81e2488fa86ccd5;p=thirdparty%2Fstrongswan.git

NEWS: Add acert and pki changes for 5.1.3
---

diff --git a/NEWS b/NEWS
index 0d22295d47..9dd0ed1b4e 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,16 @@
+strongswan-5.1.3
+----------------
+
+- The acert plugin evaluates X.509 Attribute Certificates. Group membership
+  information encoded as strings can be used to fulfill authorization checks
+  defined with the rightgroups option. Attribute Certificates can be loaded
+  locally or get exchanged in IKEv2 certificate payloads.
+
+- The pki command gained support to generate X.509 Attribute Certificates
+  using the --acert subcommand, while the --print command supports the ac type.
+  The openac utility has been removed in favor of the new pki functionality.
+
+
 strongswan-5.1.2
 ----------------