X-Git-Url: https://git.strongswan.org/?p=strongswan.git;a=blobdiff_plain;f=NEWS;h=f63078fc4c66d09d9494ba852ef0aaa5bc1f90f7;hp=d0125f1bdc7da3005ef974dff124d8baf3f29433;hb=2fcc4168f82eb77ef7b9b95066b0295062693ebe;hpb=623d3dcf78c0d96e44dbf2867b02acf10e51a812

diff --git a/NEWS b/NEWS
index d0125f1..f63078f 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,20 @@
+strongswan-4.0.3
+----------------
+
+- Added support for the auto=route ipsec.conf parameter and the
+  ipsec route/unroute commands for IKEv2. This allows to set up IKE_SAs and 
+  CHILD_SAs dynamically on demand when traffic is detected by the 
+  kernel.
+
+- Added support for rekeying IKE_SAs in IKEv2 using the ikelifetime parameter.
+  As specified in IKEv2, no reauthentication is done (unlike in IKEv1), only
+  new keys are generated using perfect forward secrecy. An optional flag
+  which enforces reauthentication will be implemented later.
+
+- "sha" and "sha1" are now treated as synonyms in the ike= and esp=
+  algorithm configuration statements.
+
+
 strongswan-4.0.2
 ----------------
 
@@ -75,6 +92,7 @@ strongswan-4.0.1
   listcerts and allows proper load, reload and delete of connections
   via ipsec starter.
 
+
 strongswan-4.0.0
 ----------------