From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 14 Apr 2022 16:43:16 +0000 (+0200)
Subject: Merge branch 'labeled-ipsec'
X-Git-Tag: 5.9.6rc1~3
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=8b8a2ee43adbfa0eb3d9052af7c5dcaa70f08c71;p=thirdparty%2Fstrongswan.git

Merge branch 'labeled-ipsec'

This adds support for labeled IPsec with SELinux (and a proprietary mode
that can be used to match child configs).  For SELinux support, compile
with --enable-selinux.

Other changes include a combined start action (trap|start), avoiding
initiating duplicate CHILD_SAs, updating reqids if dynamic traffic
selectors change, removing reqid errors on policy updates, or querying
specific CHILD_SAs with vici's list-sas command.

Closes #3075
---

8b8a2ee43adbfa0eb3d9052af7c5dcaa70f08c71