[Swan-commit] Changes to ref refs/heads/main

[Paul Wouters]

New commits:
commit 47032c9b40fc16f88d763a2b759b71515e80f512
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Mar 15 18:09:31 2021 -0400

    documentation: updated CHANGES

commit a1c01bbc0f655dd24980380b964e70197b62be6d
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Mar 15 18:07:58 2021 -0400

    testing: updated TESTLIST for ikev2-crossing-streams-03-iface passing

commit 698bc53563c96a56c7e6990224a48bb0f77e4127
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Mar 15 18:07:46 2021 -0400

    testing: update ikev2-crossing-streams-03-iface

commit 30c82717a6579a03bf62bc94f77c884b63647bce
Author: Paul Wouters <pwouters at redhat.com>
Date:   Mon Mar 15 18:04:46 2021 -0400

    pluto: Pass XFRM ID (if_id) into shunt_eroute() for the %trap policy
    
    Otherwise, packets will still cause an acquire due to mismatch when
    the %trap got replaced by another instance. This can happen when
    using ipsec-interface=X with auto=start where one endpoint restarts
    slowly, and the other endpoint revives the connection and is in a
    slow retransmit case - while the restarted endpoint initiates as
    well and finishes before the outstanding IKE_INIT message retry
    code notices it has been superseeded.
    
    This is tested in ikev2-crossing-streams-03-iface