strongswan-5.9.8dr4
-------------------

- Some minor fixes in the pki --est|--estca command.


strongswan-5.9.8dr3
-------------------

- The charon.rsa_pss_trailerfield setting generates an algorithmIdentifier with
  explicit trailerField.


strongswan-5.9.8dr2
-------------------

- The pki --req command can create a certificate request based on an existing
  PKCS#10 template by replacing the public key and re-generating the signature
  with the new private key.


strongswan-5.9.8dr1
-------------------

- The pki --scep|--scepca command supports the HTTP-based "Simple Certificate
  Enrollment Protocol" (RFC 8894 SCEP) replacing the obsoleted scepclient that
    has been removed.

- The pki --est|estca command supports the HTTPS-based "Enrollment over Secure
  Transport" (RFC 7070 EST) protocol