From 37fb03554b6b5befddb41280dc361da5dbe142a9 Mon Sep 17 00:00:00 2001
From: Martin Willi <martin@strongswan.org>
Date: Thu, 26 Apr 2007 06:33:03 +0000
Subject: [PATCH] updated NEWS

---
 NEWS | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index 9ff20ac..a9d5062 100644
--- a/NEWS
+++ b/NEWS
@@ -1,10 +1,19 @@
 strongswan-4.1.2
 ----------------
 
+- Support for an additional diffie hellman exchange when creating/rekeying
+  a CHILD_SA in IKEv2 (PFS). PFS is enabled when the proposal contains a
+  DH group (e.g. "esp=aes128-sha1-modp1536"). Further, DH group negotiation
+  is implemented properly for rekeying.
+
+- Support for the AES-XCBC-96 MAC algorithm for IPsec SAs when using IKEv2
+  (requires linux >= 2.6.20). It is enabled using e.g. "esp=aes256-aesxcbc".
+
+- Added support for EAP modules which do not establish an MSK.
+
 - The xauth_modules.verify_secret() function now passes the
   connection name.
 
-
 strongswan-4.1.1
 ----------------
 
-- 
2.7.4