From: Tobias Brunner <tobias@strongswan.org>
Date: Wed, 28 Aug 2019 10:17:44 +0000 (+0200)
Subject: NEWS: Added some news for 5.8.1
X-Git-Tag: 5.8.1rc2~3
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=82cd511cc922b48a4c8a04ff2f59a33738bb7cc4;p=thirdparty%2Fstrongswan.git

NEWS: Added some news for 5.8.1
---

diff --git a/NEWS b/NEWS
index 8c763d47b1..f9c2499183 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,20 @@
+strongswan-5.8.1
+----------------
+
+- RDNs in Distinguished Names can now optionally be matched less strict. The
+  global option charon.rdn_matching takes two alternative values that cause the
+  matching algorithm to either ignore the order of matched RDNs or additionally
+  accept DNs that contain more RDNs than configured (unmatched RDNs are treated
+  like wildcard matches).
+
+- The updown plugin now passes the same interface to the script that is also
+  used for the automatically installed routes, i.e. the interface over which the
+  peer is reached instead of the interface on which the local address is found.
+
+- TPM 2.0 contexts are now protected by a mutex to prevent issues if multiple
+  IKE_SAs use the same private key concurrently.
+
+
 strongswan-5.8.0
 ----------------