Commit 715515c3a2 for strongswan.org
commit 715515c3a2a6d95d3be67614fb6e8a5c5c8dd9a3
Merge: cc3e08af37 78a8f2d733
Author: Tobias Brunner <tobias@strongswan.org>
Date: Fri Aug 28 16:52:27 2026 +0200
Merge branch 'kernel-netlink-migrate'
This adds support for the new XFRM_MSG_MIGRATE_STATE message in Linux 7.2.
It allows migrating specific SAs to different IPs (and changing other
properties). This now enables updating SAs even when the kernel's
lockdown feature is set to confidentiality (i.e. we don't get the keys
back when we query an SA). The behavior for the latter when running
on older kernels is also improved.