Add NEWS about explicitly loaded pkcs11 certificates from ipsec.conf

diff --git a/NEWS b/NEWS
index d9743ecac16fdf2482c801215c5222697c9c6259..807c5aee0628061e49c31485bfc280929e66e23c 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -17,6 +17,10 @@ strongswan-5.0.2
   explicitly (such as prfsha1 or prfsha256), no implicit PRF algorithm based on
   the integrity algorithm is added to the proposal.
 
+- The pkcs11 plugin can now load leftcert certificates from a smartcard for a
+  specific ipsec.conf conn section and cacert CA certificates for a specific ca
+  section.
+
 strongswan-5.0.1
 ----------------