[Swan-commit] Changes to ref refs/heads/main

[Paul Wouters]

New commits:
commit 663b1f579de0c0a45d0936d898373ecc45905f6a
Merge: c840c42 37a4b9f
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Jul 8 13:57:10 2020 -0400

    Merge branch 'main' of vault.libreswan.fi:/srv/src/libreswan into main

commit c840c42a76c969615fa3e5f553152f9d250bc89e
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Tue Jul 7 23:07:52 2020 -0400

    testing: update ikev2-redirect-06-roadwarriors test
    
    False negatives can happen in this test, because the roadwarriors are
    redirected at the same time and sometimes they arive in the right order
    to the other gateway, sometimes they arrive in 'wrong' order which causes
    inverted console logs and test fail.
    
    Signed-off-by: Paul Wouters <pwouters at redhat.com>

commit 32353c252acbe2f8825b7ef65f72aa7b6a6e5fc4
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Tue Jul 7 23:06:47 2020 -0400

    IKEv2: redirect: refactor redirect during active sessions
    
    remove --peer-ip <ip_address> from whack --redirect command, whose itended
    use case was to redirect a *single* peer to other gateway. That is basically
    useless, so we remove it.
    
    - improve logging
    
    Signed-off-by: Paul Wouters <pwouters at redhat.com>

commit 8d32601c70eb03c7282c34c45124502d1046c929
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue Jul 7 23:04:54 2020 -0400

    testing: updated TESTLIST

commit 4de427cb39fe9b67ff63951cd85ff5d7f3ee7478
Author: Paul Wouters <pwouters at redhat.com>
Date:   Tue Jul 7 23:02:36 2020 -0400

    testing: add missing files from rewritten ikev2-10-2behind-nat

commit bab58ddf571c5aef21658495e25e0b0c72bc9177
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Tue Jul 7 23:01:00 2020 -0400

    testing: add test for redirect load-balancing
    
    ikev2-redirect-01-global-load-balancer

commit a507cfefe59ca7e52cc1aef8f371f18b37688c68
Author: Vukasin Karadzic <vukasin.karadzic at gmail.com>
Date:   Tue Jul 7 22:56:13 2020 -0400

    IKEv2: redirect: enable load-balancing feature
    
    Add option to specify multiple destinations for redirection during
    IKE_SA_INIT. In addition to that, simplify redirect code a bit.
    
    D. Hugh Redelmeier assisted in improving this patch.
    
    This addition enables to have one 'front' server that will be used as a
    load balancer, redirecting incoming clients to a list of other servers.
    
    Before it was possible only to have something like 'global-redirect-to=1.1.1.1'
    Now one can have, i.e. 'global-redirect-to=1.1.1.1,2.2.2.2,3.3.3.3'
    
    Signed-off-by: D. Hugh Redelmeier <hugh at mimosa.com>
    Signed-off-by: Paul Wouters <pwouters at redhat.com>