v3.22 (unreleased) * pluto: Support for RFC 7427 Digital Signature AUTH [Sahana Prasad/GSoC] * pluto: Change default rundir from /var/run/pluto to /run/pluto [Paul] * various: phase out --ctlbase for --ctlsocket and --rundir [Paul] * libipsecconf: reject unavailable kernel algorithms in parser [Andrew] * libswan/pluto: throw a clearer error for broken libunbound [Paul] * pluto: Various ike_alg parsing updates [Andrew] * libswan/pluto: Cleanup logging and tighten logging lock [Andrew] * Bugtracker bugs fixed: #294: Bug in public key reported by rsasigkey [Tijs Van Buggenhout/Andrew]