strongswan-5.9.8rc1
-------------------

- The charon.rsa_pss_trailerfield setting generates an algorithmIdentifier with
  explicit trailerField.

- The pki --req command can create a certificate request based on an existing
  PKCS#10 template by replacing the public key and re-generating the signature
  with the new private key.

- The pki --scep|--scepca command supports the HTTP-based "Simple Certificate
  Enrollment Protocol" (RFC 8894 SCEP) replacing the obsoleted scepclient that
  has been removed.

- The pki --est|estca command supports the HTTPS-based "Enrollment over Secure
  Transport" (RFC 7070 EST) protocol