diff --git a/NEWS b/NEWS
index c8712c846..c7faa2265 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,14 @@
+strongswan-5.9.
+----------------
+
+- The pki --scep|--scepca command supports the HTTP-based "Simple Certificate
+  Enrollment Protocol" (RFC 8894 SCEP) replacing the obsoleted scepclient that
+  has been removed.
+
+- The pki --est|estca command supports the HTTPS-based "Enrollment over Secure
+  Transport" (RFC 7070 EST) protocol
+
+
 strongswan-5.9.7
 ----------------
 
diff --git a/configure.ac b/configure.ac
index 140cbe53f..4c99952a2 100644
--- a/configure.ac
+++ b/configure.ac
@@ -20,7 +20,7 @@
 #  initialize & set some vars
 # ============================
 
-AC_INIT([strongSwan],[5.9.7])
+AC_INIT([strongSwan],[5.9.8dr1])
 AM_INIT_AUTOMAKE(m4_esyscmd([
 	echo tar-ustar
 	echo subdir-objects
diff --git a/testing/testing.conf b/testing/testing.conf
index a4e714323..0f39460d9 100644
--- a/testing/testing.conf
+++ b/testing/testing.conf
@@ -24,14 +24,14 @@ fi
 : ${TESTDIR=/srv/strongswan-testing}
 
 # Kernel configuration
-: ${KERNELVERSION=5.18.14}
+: ${KERNELVERSION=5.19.4}
 : ${KERNEL=linux-$KERNELVERSION}
 : ${KERNELTARBALL=$KERNEL.tar.xz}
-: ${KERNELCONFIG=$DIR/../config/kernel/config-5.18}
+: ${KERNELCONFIG=$DIR/../config/kernel/config-5.19}
 : ${KERNELPATCH=ha-5.15-abicompat.patch.bz2}
 
 # strongSwan version used in tests
-: ${SWANVERSION=5.9.7}
+: ${SWANVERSION=5.9.8dr1}
 
 # Build directory where the guest kernel and images will be built
 : ${BUILDDIR=$TESTDIR/build}