From e98a4d8028f7088f3d7bd786d6a6d69bdc52438a Mon Sep 17 00:00:00 2001
From: Andreas Steffen <andreas.steffen@strongswan.org>
Date: Fri, 25 Dec 2009 09:10:44 +0100
Subject: [PATCH] Added RFC 3779 support to NEWS

---
 NEWS | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/NEWS b/NEWS
index 3b2f0d00d..4219786b3 100644
--- a/NEWS
+++ b/NEWS
@@ -1,6 +1,9 @@
 strongswan-4.3.6
 ----------------
 
+- The IKEv2 daemon supports RFC 3779 IP address block constraints 
+  carried as a critical X.509v3 extension in the peer certificate.
+
 - The ipsec pool --add|del dns|nbns command manages DNS and NBNS name
   server entries that are sent via the IKEv1 Mode Config or IKEv2
   Configuration Payload to remote clients.