From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 4 Mar 2016 15:29:32 +0000 (+0100)
Subject: NEWS: Add note about IKEv2 signature scheme constraints
X-Git-Tag: 5.4.0dr8~10^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c171afeaedb37bc4f13eafb70f0daa7a34f672d2;p=thirdparty%2Fstrongswan.git

NEWS: Add note about IKEv2 signature scheme constraints
---

diff --git a/NEWS b/NEWS
index 100856e0a5..fcb89f09ea 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,10 @@ strongswan-5.4.0
   on different selectors via VICI/swanctl.  Unless disabled in strongswan.conf
   the charon daemon will follow redirect requests received from servers.
 
+- The ike: prefix enables the explicit configuration of signature scheme
+  constraints against IKEv2 authentication in rightauth, which allows the use
+  of different signature schemes for trustchain verification and authentication.
+
 - For the vici plugin a Vici:Session Perl CPAN module has been added to allow
   Perl applications to control and/or monitor the IKE daemon using the VICI
   interface, similar to the existing Python egg or Ruby gem.