diff --git a/NEWS b/NEWS index 9c0375b51..d9743ecac 100644 --- a/NEWS +++ b/NEWS @@ -12,6 +12,10 @@ strongswan-5.0.2 tunnels. The "ipsec lookip" command can be used to query such information or receive notifications. +- IKE proposals can now use a PRF algorithm different to that defined for + integrity protection. If an algorithm with a "prf" prefix is defined + explicitly (such as prfsha1 or prfsha256), no implicit PRF algorithm based on + the integrity algorithm is added to the proposal. strongswan-5.0.1 ----------------