[Swan-commit] Changes to ref refs/heads/main

[Antony Antony]

New commits:
commit fb03d218e7859470137ff400ec203b1615a5eb5a
Author: Antony Antony <antony at phenome.org>
Date:   Thu Apr 6 19:00:13 2023 +0000

    kernel: apply fixes to when nft is enabled.
    
    /source/rpmbuild/BUILD/libreswan-4.9_1226_gd2e4c04454ed_main/programs/pluto/kernel_policy.c:531:33: error: 'st' undeclared (first use in this function)
      531 |                                 st->st_logger,
          |                                 ^~
    /source/rpmbuild/BUILD/libreswan-4.9_1226_gd2e4c04454ed_main/programs/pluto/kernel_policy.c:531:33: note: each undeclared identifier is reported only once for each function it appears in
    /source/rpmbuild/BUILD/libreswan-4.9_1226_gd2e4c04454ed_main/programs/pluto/kernel_policy.c:532:33: error: passing argument 13 of 'raw_policy' from incompatible pointer type [-Werror=incompatible-pointer-types]
      532 |                                 "%s() add inbound Child SA", __func__)) {
          |                                 ^~~~~~~~~~~~~~~~~~~~~~~~~~~
    
    Fixes: 1ff03847f4e0 ("kernel: move install_{{inbound,outbound}_ipsec,bare}_kernel_policy() code to kernel_policy.[hc]")

commit 61d874485356aaeafbf4d72e3dc353821f0644d1
Author: Andrew Cagney <cagney at gnu.org>
Date:   Fri Oct 28 15:07:20 2022 -0400

    installing: FINALLIBEXECDIR -> LIBEXECDIR
    
    fix: libreswan-testing.spec
    
    installing: FINALMANDIR->MANDIR
    also known as IPSEC_EXECDIR; #887
    
    Signed-off-by: Antony Antony <antony at phenome.org>

commit d50fa3018d0a8e7860b053efcf9a9869c272d735
Author: Antony Antony <antony at phenome.org>
Date:   Sat Feb 25 10:22:00 2023 +0000

    linux: allow nftables and iptables and prefer nftables
    
    HAVE_IPTABLES=true HAVE_NFTABLES=true are allowed..
    When both are enabled the scripts would prefer nftables at runtime.
    
    Default is HAVE_IPTABLES=true HAVE_NFTABLES=false
    
    This won't work in our testing yet, because several test cases output will
    show a diff in ipsec-look output. Test output need to be migrated before enabling
    nftables by default. Another option upstream default to nftables
    disable in our testbuild.