[Swan-commit] Changes to ref refs/heads/main

[Andrew Cagney]

New commits:
commit 0d146451905283b461360291d17c52dec230268b
Merge: 8c9cfb9 7ed0ed3
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Sep 30 16:05:07 2021 -0400

    ikev2: when deleteing connections, delete states top-down
    
    i.e., when applicable, delete the IKE SA first (removing any need
    to also delete the Child SA).  Use hash tables to find states.
    
    Merge commit '7ed0ed341717cea4fc17e21f4e45a323de3d5dcd'

commit 7ed0ed341717cea4fc17e21f4e45a323de3d5dcd
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Sep 30 16:03:07 2021 -0400

    testing: for IKEv2, expect the IKE SA to be deleted before Child SAs

commit 013e7e7a67e2b0c9dd9cb5536ba7f4b8bfbf0254
Author: Andrew Cagney <cagney at gnu.org>
Date:   Thu Sep 30 15:33:14 2021 -0400

    ikev2: change delete_states_by_connection() to be top-down
    
    For IKEv2, try to delete the IKE SA first (IKEv1 is still
    bottom-up):
    
    - when deleting an IKE family, one delete instead of two
      Doesn't stop code sending a delete when the message
      window is full though.
    
    - uses O(1) hash tables to find the states
      (IKEv1 still uses O(#STATES) loops)
    
    - zaps connection parameter when connection disappears
    
    - doesn't use CK_GOING_AWAY
      (IKEv1 still does though)