From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 21 Aug 2015 16:27:12 +0000 (+0200)
Subject: Merge branch 'starter-kernel-flush'
X-Git-Tag: 5.3.3rc1~2
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ba3298fa8da4c5576d73ee2029a18ecf993d3d12;p=thirdparty%2Fstrongswan.git

Merge branch 'starter-kernel-flush'

Removes flushing of the IPsec state in the kernel when starter
terminates.  We can't easily flush only the policies created for
IPsec SAs (and if installpolicies=no is used we don't want to flush
policies anyway).  Also, since existing policies don't cause errors
anymore these aren't really an issue anymore (I think this was one of
the main reasons to flush the state).  This behavior is also specific to
starter, so nothing is flushed when charon is used via systemd/swanctl.
This will also allow us to merge libhydra with libcharon in a future
release.

If the previous behavior is needed it can easily be replicated with some
external tools (we could also write a simple utility that does this).

Additional checks in the test environment make sure that the daemon
cleans up the state properly.
---

ba3298fa8da4c5576d73ee2029a18ecf993d3d12