[Swan-commit] Changes to ref refs/heads/main

[Andrew Cagney]

New commits:
commit 23758af2bb2f08769fb41537b5d7f69fd3c662b1
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Jan 24 08:30:28 2024 -0500

    pending: process the IKE SA's pending queue first-in first-out
    
    And not LIFO, see:
    
      give pending a proper linked list #1573
    
    This fixes:
    
    - the IKE SA's connection's Child SA will be scheduled
      first (using IKE_AUTH) and not last because some other
      connection has jumped the queue; look at alias tests
      for examples
    
    - when an up connection fails it goes onto the end of the
      pending queue when reviving; which should make things
      more fair
    
    However:
    
    - because the replace IKE code doesn't schedule a first child,
      a reviving connection ends up at the end of the pending
      queue; see ikev2-child-ipsec-replace-ike and:
    
        should replacing an IKE SA also schedule replacement of the first child #1575
    
    Also rename add_pending() to append_pending()

commit ffb93cc7eabe3faa7ef9d0183fcb31edb1202236
Author: Andrew Cagney <cagney at gnu.org>
Date:   Wed Jan 24 08:25:42 2024 -0500

    testing: expect the IKE SA to initiate it's own connection first
    
    see:
      give pending a proper linked list #1573