From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 18 Jun 2021 08:31:31 +0000 (+0200)
Subject: NEWS: Add news for 5.9.3
X-Git-Tag: 5.9.3dr4~10
X-Git-Url: http://git.ipfire.org/gitweb/gitweb.cgi?a=commitdiff_plain;h=0fc8cf0013be2d6c014610f70fa109592b0e8df9;p=thirdparty%2Fstrongswan.git

NEWS: Add news for 5.9.3
---

diff --git a/NEWS b/NEWS
index 7c982f0323..831d37f971 100644
--- a/NEWS
+++ b/NEWS
@@ -3,6 +3,22 @@ strongswan-5.9.3
 
 - Added AES_ECB, SHA-3 and SHAKE-256 support to wolfssl plugin.
 
+- Added AES_CCM and SHA-3 signature support to openssl plugin.
+
+- The x509 and openssl plugins now consider the authorityKeyIdentifier, if
+  available, before verifying signatures, which avoids unnecessary signature
+  verifications after a CA key rollover if both certificates are loaded.
+
+- The pkcs11 plugin better handles optional attributes like CKA_TRUSTED, which
+  previously depended on a version check.
+
+- charon-nm now supports using SANs as client identities, not only full DNs.
+
+- charon-tkm now handles IKE encryption.
+
+- A MOBIKE update is sent again if a a change in the NAT mappings is detected
+  but the endpoints stay the same.
+
 - Converted most of the test case scenarios to the vici interface