[Swan-commit] Changes to ref refs/heads/main

[Andrew Cagney]

New commits:
commit 37c0ed21f64540fb6f1d4048aad081f247c8c07e
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Sep 6 08:35:07 2023 -0400

    routing: always dispatch ESTABLISH_{INBOUND,OUTBOUND}
    
    - for Labeled IPsec this means that labeled-child connections
      transition into/out-of unrouted-tunnel
    
    - for rekeys this means that for {UN,}ROUTED_TUNNEL both
      the inbound and outbound SAs are re-established
    
    - also drop more IKEv1 Labeled IPsec transitions
    
    Keep in mind that this code path is still inverted (and probably
    will remain that way for some time).  Instead of:
       state code -> all kernel state/policy code -> dispatch()
    it should be:
       state code -> dispatch() -> just needed kernel state/policy
    (since the dispatch code knows the current routing state it
    knows just what needs to be done next).
    
    It turned out that "labeled ipsec: route/unroute labeled children"
    fixed more bugs than expected.