From: Martin Willi <martin@revosec.ch>
Date: Tue, 13 Jul 2010 07:34:57 +0000 (+0200)
Subject: Added NEWS for revocation/addrblock plugin
X-Git-Tag: 4.4.1~68
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e9448cfc2f28faf286084eb4cbf688db9a1fe12c;p=thirdparty%2Fstrongswan.git

Added NEWS for revocation/addrblock plugin
---

diff --git a/NEWS b/NEWS
index aeb3e524f5..4fb43428e7 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,13 @@ strongswan-4.4.1
 
 - The openssl plugin now supports X.509 certificate and CRL functions.
 
+- OCSP/CRL checking in IKEv2 has been moved to the revocation plugin, enabled
+  by default. Update manual load directives in strongswan.conf.
+
+- RFC3779 ipAddrBlock constraint checking has been moved to the addrblock
+  plugin, disabled by default. Enable it and update manual load directives
+  in strongswan.conf, if required.
+
 - The major refactoring of the IKEv1 Mode Config functionality now allows
   the transport and handling of any Mode Config attribute.