main/strongswan: cherry-pick upstream fixes

also fixes a minor memory leak in patch 1001 (the offending hunk is
now just deleted, as other upstream commits fixed the issue it tried
to address)

1 files changed, 117 insertions, 41 deletions

diff --git a/main/strongswan/APKBUILD b/main/strongswan/APKBUILD
index 965fd3c17a..4192088aa3 100644
--- a/main/strongswan/APKBUILD
+++ b/main/strongswan/APKBUILD
@@ -3,7 +3,7 @@
 pkgname=strongswan
 pkgver=5.3.2
 _pkgver=${pkgver//_rc/rc}
-pkgrel=6
+pkgrel=7
 pkgdesc="IPsec-based VPN solution focused on security and ease of use, supporting IKEv1/IKEv2 and MOBIKE"
 url="http://www.strongswan.org/"
 arch="all"
@@ -16,17 +16,36 @@ makedepends="$depends_dev linux-headers"
 install="$pkgname.pre-install"
 subpackages="$pkgname-doc $pkgname-dbg"
 source="http://download.strongswan.org/$pkgname-$_pkgver.tar.bz2
-	0001-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
-	0002-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
-	0003-controller-Optionally-adhere-to-init-limits-also-whe.patch
-	0004-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
-	0005-vici-Optionally-check-limits-when-initiating-connect.patch
+	0001-vici-Asynchronize-debug-logging.patch
+	0002-host-Properly-handle-NULL-in-host_create_from_string.patch
+	0002-ike-sa-manager-Safely-access-the-RNG-instance-with-a.patch
+	0003-ike-cfg-Add-helper-function-to-determine-address-fam.patch
+	0004-ike-Use-address-family-of-local-address-when-resolvi.patch
+	0005-ike-Fall-back-to-the-current-remote-IP-if-it-resolve.patch
+	0006-trap-manager-Properly-check-in-IKE_SA-if-initiating-.patch
+	0007-trap-manager-Changed-how-acquires-we-acted-on-are-tr.patch
+	0008-trap-manager-Resolve-race-conditions-between-flush-a.patch
+	0009-shunt-manager-Add-a-lock-to-safely-access-the-list-o.patch
+	0010-shunt-manager-Remove-stored-entries-if-installation-.patch
+	0011-shunt-manager-Add-flush-method-to-properly-uninstall.patch
+	0012-daemon-Flush-shunts-before-unloading-plugins.patch
+	0013-ike-rekey-Reset-IKE_SA-on-the-bus-after-destroying-n.patch
+	0014-ike-rekey-Reset-IKE_SA-on-bus-before-sending-CREATE_.patch
+	0015-ike-rekey-Fix-cleanup-call.patch
+	0016-ike-Fix-memory-leak-if-remote-address-is-kept.patch
+	0101-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
+	0102-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
+	0201-ike-Also-track-initiating-IKE_SAs-as-half-open.patch
+	0202-controller-Optionally-adhere-to-init-limits-also-whe.patch
+	0203-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
+	0204-vici-Optionally-check-limits-when-initiating-connect.patch
+	0205-ike-Adhere-to-IKE_SA-limit-when-checking-out-by-conf.patch
+	0301-ikev1-Assign-different-job-priorities-for-inbound-IK.patch
+	0401-printf-hook-builtin-Fix-invalid-memory-access.patch
 	1001-charon-add-optional-source-and-remote-overrides-for-.patch
 	1002-vici-send-certificates-for-ike-sa-events.patch
 	1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
 	1004-vici-support-asynchronous-initiation.patch
-	1005-ikev1-message-priorities.patch
-	1006-fix-printf-strlen.patch
 	2001-support-gre-key-in-ikev1.patch
 
 	strongswan.initd
@@ -111,47 +130,104 @@ package() {
 }
 
 md5sums="fab014be1477ef4ebf9a765e10f8802c  strongswan-5.3.2.tar.bz2
-eb8d38dbf918e5f3adfd55f8ace7aeb1  0001-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
-53982788f8ab0962193f695da30a8a94  0002-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
-c46a4f2b21a83988512f6108e154620b  0003-controller-Optionally-adhere-to-init-limits-also-whe.patch
-8b5ea458119df0c1ecee181c0f7f7c57  0004-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
-0f8316631df321caad6c9b6b5c0b6e5c  0005-vici-Optionally-check-limits-when-initiating-connect.patch
-b7244e10364e6348665048b9eec43cc6  1001-charon-add-optional-source-and-remote-overrides-for-.patch
-4970959a1722b4139e7a22a2d93e866d  1002-vici-send-certificates-for-ike-sa-events.patch
-89f7d85291d6a82230e5337cfa071a67  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
-aac217481a1a8ae68719771039c27354  1004-vici-support-asynchronous-initiation.patch
-3accc4500255622cb14844e7111e2932  1005-ikev1-message-priorities.patch
-9b6175216c1761305f2048d9d88865a0  1006-fix-printf-strlen.patch
+78960bec9b1d3be2db9bfe8d73347ceb  0001-vici-Asynchronize-debug-logging.patch
+f05c992e0c79a254fe8dfe3989d29ae6  0002-host-Properly-handle-NULL-in-host_create_from_string.patch
+5d2720f3b0f9ae4632703c8638e29088  0002-ike-sa-manager-Safely-access-the-RNG-instance-with-a.patch
+413d0409a1232de61d61e99d7e57c2f5  0003-ike-cfg-Add-helper-function-to-determine-address-fam.patch
+0660bab646fc9dbf99a5f9485e570b0e  0004-ike-Use-address-family-of-local-address-when-resolvi.patch
+30ac430b88cdfb23546a3ac1a6247d6c  0005-ike-Fall-back-to-the-current-remote-IP-if-it-resolve.patch
+de114c8e0f0fb84aaef46b55b912c7df  0006-trap-manager-Properly-check-in-IKE_SA-if-initiating-.patch
+a99f6c1cc578b17e9c69378869942ffd  0007-trap-manager-Changed-how-acquires-we-acted-on-are-tr.patch
+e7e8b6171239f3462f8f6739fcfdc56b  0008-trap-manager-Resolve-race-conditions-between-flush-a.patch
+400a514e50a378265a0ec1cff46f1f02  0009-shunt-manager-Add-a-lock-to-safely-access-the-list-o.patch
+551d01ca98e3e8b6bfea54938c576ec6  0010-shunt-manager-Remove-stored-entries-if-installation-.patch
+b5f4a1a5cd7e5f10e9487a23078bcbab  0011-shunt-manager-Add-flush-method-to-properly-uninstall.patch
+65341200450445191b67914df2629fe6  0012-daemon-Flush-shunts-before-unloading-plugins.patch
+1ea2d1a97aa37bac24a1ec9b1ce7c985  0013-ike-rekey-Reset-IKE_SA-on-the-bus-after-destroying-n.patch
+054b28fd78fccb20b993ec2679f98bc6  0014-ike-rekey-Reset-IKE_SA-on-bus-before-sending-CREATE_.patch
+6b57da364f1222eb2a8eda8f146c784b  0015-ike-rekey-Fix-cleanup-call.patch
+0941f8e871fff5ab8c984830d23b35a1  0016-ike-Fix-memory-leak-if-remote-address-is-kept.patch
+d97c846c00c60a35925662ba551495df  0101-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
+d73abf4c9c3354120152144e7985d428  0102-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
+c3f86cc9b0866f2e748f40d3058a5b14  0201-ike-Also-track-initiating-IKE_SAs-as-half-open.patch
+55feb2633c42927672113e44465fd824  0202-controller-Optionally-adhere-to-init-limits-also-whe.patch
+d57e117d13da147910e2ae09219d2492  0203-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
+8e79293070086233035a93322b935048  0204-vici-Optionally-check-limits-when-initiating-connect.patch
+c46165934687326a26ec9153a34e2227  0205-ike-Adhere-to-IKE_SA-limit-when-checking-out-by-conf.patch
+9b607cf38cff83547368d82fa34d716f  0301-ikev1-Assign-different-job-priorities-for-inbound-IK.patch
+c7c0338de6dc4993cb8cb71238fd13dc  0401-printf-hook-builtin-Fix-invalid-memory-access.patch
+06607758b690f2db961d84e26ee7d6ea  1001-charon-add-optional-source-and-remote-overrides-for-.patch
+1aae491acf4739d871a64cd4481551f6  1002-vici-send-certificates-for-ike-sa-events.patch
+b0f2d10bc3dc89f3bba28fead6687311  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
+ca53b3df714aa588af99d4f720c4318b  1004-vici-support-asynchronous-initiation.patch
 b9f874287c35cce075b761087c28ab50  2001-support-gre-key-in-ikev1.patch
 85ebc1b6c6b9c0c6640d8136e97da8e1  strongswan.initd
 7962a720ebef6892d80a3cbdab72c204  charon.initd"
 sha256sums="a4a9bc8c4e42bdc4366a87a05a02bf9f425169a7ab0c6f4482d347e44acbf225  strongswan-5.3.2.tar.bz2
-bce611d5f3d773589c6a751aec7fbaab39c8926134cab6fe2d5586639244bdc0  0001-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
-4e1f76a76278c7621ca860156c25dfda90a7d9010b6426a9fd7c74c190166043  0002-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
-fb7478cad812e40134f5796c5faea4f939a71c4676efe9d17573041b696a61c7  0003-controller-Optionally-adhere-to-init-limits-also-whe.patch
-31f8e5c1f451ed14045072cd13f2085c39f064403f264d12fb2f75aa5e996f5a  0004-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
-a5601aa4ce0be4ac74f482817fd64c60e4986781271a2ed354806bbcbcd2223b  0005-vici-Optionally-check-limits-when-initiating-connect.patch
-a3d471cbcc9481264352ca029b70ad8f85fab15495a4aef3cbb209fc19765436  1001-charon-add-optional-source-and-remote-overrides-for-.patch
-baa8ee13f207f5e89b34b759c355e48ed79138fabcd9af841692afb15cf8b61f  1002-vici-send-certificates-for-ike-sa-events.patch
-e0de13d4fc6d66e33973696d62b4a45cd63b5fa6c477891e7651102c2bc3a4d7  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
-295476ace69d36f1059c48afb99ec5180086710146a6e10c28c7eed96759a976  1004-vici-support-asynchronous-initiation.patch
-0e814067bf47e9b4a0127b5197ea321e1398b1bc8e0635d576898fc977233d67  1005-ikev1-message-priorities.patch
-2b5d384a73373e16dc8bf75e55149173de00f454fe0de1b65296e73e68275042  1006-fix-printf-strlen.patch
+37da81cde0afd5b2d025a62b36020ff4739bccc086bcfd1528e461534b99e1e8  0001-vici-Asynchronize-debug-logging.patch
+ee88c4636efb8e06ff66e50e82b5de5a2f49a2b60042b157b09c110332db1f2c  0002-host-Properly-handle-NULL-in-host_create_from_string.patch
+442b721d4ee156e5bb8167f4f5831abe727d8440b26f0ba91a32f21eade14305  0002-ike-sa-manager-Safely-access-the-RNG-instance-with-a.patch
+28fb9b57d5c02ae2b10e283f13de4d7257913a44ce68e287f73144d4fe2c0972  0003-ike-cfg-Add-helper-function-to-determine-address-fam.patch
+e8e967357a6741df02b80fcd75729044179549e24623d483c1f4ee603a83152b  0004-ike-Use-address-family-of-local-address-when-resolvi.patch
+a246364122d40ef70091cdf86ea16413a20f3461e137f8209c58959dfaf09396  0005-ike-Fall-back-to-the-current-remote-IP-if-it-resolve.patch
+79861e897dd8e973d2426f083079adb74cc3c281b1c891eb6fbf7e569f0b74f4  0006-trap-manager-Properly-check-in-IKE_SA-if-initiating-.patch
+a9f59b91d3ac04fd52684fd4143545452368d65af9f6026020ba95eae114c103  0007-trap-manager-Changed-how-acquires-we-acted-on-are-tr.patch
+1b463d03b3ce0cf5223bacb08155b69c1c362fa311b1af20cb79b392ac6a233e  0008-trap-manager-Resolve-race-conditions-between-flush-a.patch
+3679e3f63a72c1f32b67ab71f60f8922384cbdeb916beca779bc7776db0332fe  0009-shunt-manager-Add-a-lock-to-safely-access-the-list-o.patch
+cd1d28855c13c9544c6f4caa619a00226d8c84cc75c3e88f962ebea9736619ad  0010-shunt-manager-Remove-stored-entries-if-installation-.patch
+ce95459cea9eaa4d7f1695e10f99ca886d428843ada8134e8f337dce957cdda0  0011-shunt-manager-Add-flush-method-to-properly-uninstall.patch
+b8b82e4b99c70cd76b09a2c7d6144e1e572bee6b4c821fcf7338d1692e1843cb  0012-daemon-Flush-shunts-before-unloading-plugins.patch
+2c4a898a4b17e196acc44947f4b48688649d29ac15c0d19e14d664bf0d9f0274  0013-ike-rekey-Reset-IKE_SA-on-the-bus-after-destroying-n.patch
+a1b61e2aafcd502c8398bfefd556dfb1429d862faecc5d6c0c843e7da215abf3  0014-ike-rekey-Reset-IKE_SA-on-bus-before-sending-CREATE_.patch
+ef5f7d38483909ae3aff5e474ac6f5f20804645ead6a6108f2534408434023ff  0015-ike-rekey-Fix-cleanup-call.patch
+257931d4443a4ed2284bf8872e73ab1e93c0d69f490e1b9b3bb2b12210cec677  0016-ike-Fix-memory-leak-if-remote-address-is-kept.patch
+130db52dea23eae4081bf25c5ef050f9dfbaa4e7e99dc0a623fdfc991eb4c5c7  0101-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
+16a41ef4cf25e3432c8a61aa34ac12d6eccd5796d921c75d72570d4f9fda2717  0102-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
+ab4042b193a68d3ff771be006fdea81eb786fee7b7c4c8c24aa60ef3372de9c8  0201-ike-Also-track-initiating-IKE_SAs-as-half-open.patch
+f81bb1934c67263e0fcb75ffa449f7d663a17ffacc4d76d233acaed54e13b10d  0202-controller-Optionally-adhere-to-init-limits-also-whe.patch
+7aac3748cabf9293701924b6e6a3f0bb74c4d4302a019eb8012af48473f35b67  0203-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
+3060dd59d44de1f6e7b82146db4b09c3fd80869c75e9a31823bcbdd9f66ac923  0204-vici-Optionally-check-limits-when-initiating-connect.patch
+6ee2826d8f2acf4010886b9990c4fe1f1be99e869144f3dd3705e38184300ca1  0205-ike-Adhere-to-IKE_SA-limit-when-checking-out-by-conf.patch
+d5e0fa9012e5d4f35b5fe903fe555019c639000f75cd269acd73126f2105149b  0301-ikev1-Assign-different-job-priorities-for-inbound-IK.patch
+74a12c42d63d6e9e920afc976b287144118c79740743beec769e5a9f239acac6  0401-printf-hook-builtin-Fix-invalid-memory-access.patch
+d2f05dc1d3e921358ca2ba8c7c68cbfa3eca3fdc108fd2b89311d8b25ff6f4bc  1001-charon-add-optional-source-and-remote-overrides-for-.patch
+b2a6f23ede01b2d24ff973dc6c1466dc5600df259eb35d3ea6efa9a4e322ae34  1002-vici-send-certificates-for-ike-sa-events.patch
+c0b39aaaf97f3797ef327a465e1468aa166044875b194e899999dc7c0723fc4c  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
+cd0de223af1f831232b2339de4ec6f902bf8fbd826aed85aa70aedfb961b1ea1  1004-vici-support-asynchronous-initiation.patch
 ec58de15c3856a2fd9ea003b7e78a7434dad54f9a4c54d499b09a6eef3761d18  2001-support-gre-key-in-ikev1.patch
 ad43d1ed2585d84e12ad1e67fbdfe93983c424c5c64b230d5027c0aae496c65f  strongswan.initd
 97b018796f0f15106b70694449cff36e8fc586292aab09ef83a05c0c13142e73  charon.initd"
 sha512sums="60b17645c00769d497f4cea2229b41a217c29fe1109b58be256a0d4a6ccf4765348b9eb89466539c2528756344c2fa969f25ea1cd8856d56c5d55aa78e632e68  strongswan-5.3.2.tar.bz2
-5ec6fd6160a55d7313f8dd3315a353d426f98ea57d167e73e97bff25ca175d2848f7ea0956cb2ec9cbca24f2be1dc0c1b1d123ee947f64baa6dfc712d04e77e1  0001-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
-ee5dc2d2c719895e69d9a0324b48d43b4b86122eb8848143db7a4a629e79d594deeb4a000a429c85a31552358e9e1e2a7de8a1917c6ebb075a77281f074e0740  0002-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
-7da65c2f5459811e4c6a1643d42eca0dedd206335a0127277a6f11cf15a75a2a546848219065517d065016639ffa2e2b40f275cca7083adc3ee545f3e051e050  0003-controller-Optionally-adhere-to-init-limits-also-whe.patch
-4192aa916c5018046a21bb2d94e82ae35a81f4f462107f81b2f1b0a95372f212411852768d34ec3937c141570789b8ac1a1734552b0a07cac96a085fe28bc848  0004-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
-4a36a0c9c456537e6b71975e6947a15a0fdcda875454ded4d23f9d1073c9258b901d7a4116786f63a590f30725cc41c23eca414e0757f240cc4f4eb8e56cb285  0005-vici-Optionally-check-limits-when-initiating-connect.patch
-4cfe0b15a28b600b51be2ae270d303a65854756e30d60d8d897e0106f77ba7e05ec1625cc7cfafce54443bcb8c72ded09aa759f2540589afea491c81a05e65f0  1001-charon-add-optional-source-and-remote-overrides-for-.patch
-142e3207aa3646a82ed1831635ef16003b86625f763927d56e074aeb5d6d04f108a21f713f877afc48119ee3df784af727e5bee8dddf0671dc2a6058f9708af4  1002-vici-send-certificates-for-ike-sa-events.patch
-1781b8de169d0d41f8cb4d63c0b85b1e9eae2d52935d3753a876e8fee542ab58933be11c36f2a230233144c94c12c1d7641dbb58c89481e27d889e7f17fad87e  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
-aaf0701a4564fdce9d4422e8c33ea704142e371392cb7fa552cf0c71cb00d0dbd5901c21e45fadc23798cfdb95066da9d24b2f2b9b037761e670ee30f4b93b35  1004-vici-support-asynchronous-initiation.patch
-bd4c9575d2aebbae48d49ef5e3fcfa0c0366c8d100a0190706b5fff7332ab34ca5f862ba8a3fe9cdcf9996371b554ab0f6561e16d57d6e425497ab015e46299a  1005-ikev1-message-priorities.patch
-dd9d873d63ae9ed47bc61b122e33be406498ca707c53560c704b87b986904f1fbfe6f293df6a6f79a0359ff9b3686fcf26e91624eb73d8139b4afe1bd26f7798  1006-fix-printf-strlen.patch
+d3135206f61496d0877b22c52c0f4246d17777935a4277bfc6e7ca8b69fb2754a52fed7e8691292df91745c00fa0d597f11cd866bb4ee91453c0e252ba77eef8  0001-vici-Asynchronize-debug-logging.patch
+87ab03664dddf30ed1ae1a1e1fc2a22715a0e74b220f316937cf0f86a5b9c38262fd8a9ad62aa1866405d0bf552d33a62621c8b91634e6bd3c7967b6e7955894  0002-host-Properly-handle-NULL-in-host_create_from_string.patch
+8f16ab691c7e778894f0fc8889ac9be8813da27e09fb304443e9053f2ed384ccd3976d7956f762136c94c870dabe808d3f97116f4573bb0df74299f1da34d643  0002-ike-sa-manager-Safely-access-the-RNG-instance-with-a.patch
+dbb5454e32cea4e671fdb109e2252536d2f8ee97097a45ad280010de7d6b7fedeb40c0418ae2af45a4393b98ac6badd9072846259be6ca823f056919fcd3b985  0003-ike-cfg-Add-helper-function-to-determine-address-fam.patch
+73dcb7874aadcf641051cef91d83158fa8a1c664c094d131fcd5ad9d1c5d00abec5a75dd92780fabf2c0690079aad73275af885a83c8791c62025593fa7af61c  0004-ike-Use-address-family-of-local-address-when-resolvi.patch
+8e3636933b7ee3eddb28b9797e3da21c494e470067bc6996509bd28a9894e037fa7575d68fb717247762dc468543b67d965745370cb1335b1f9fbc6bdf260f6e  0005-ike-Fall-back-to-the-current-remote-IP-if-it-resolve.patch
+e970869f5552557d18133bb279b98a81b7d12a6656bddccfcfbdb2b2dc80ad90cc4d1d63135b3682ccb26c83408790c792de9d64056a97c1b7df16f0b159d179  0006-trap-manager-Properly-check-in-IKE_SA-if-initiating-.patch
+65a20b7d059770786c5912811db8692ab9c03a3527f83d0d23e14db4da8c64c3ed43de7a04ba1cf2a794551471ee9456e70f723b0bb4599792a668edea1f6e77  0007-trap-manager-Changed-how-acquires-we-acted-on-are-tr.patch
+e5bd98af84b248642fb6206497c7d2fca7e42362632171e271a8a715179d10f3590eb25a7b38c9fbc058c82d657668c01e9b98d8ef1f422d0887e710342eff36  0008-trap-manager-Resolve-race-conditions-between-flush-a.patch
+c4a30bbff90c2ef59e9bebb64d336bddde811f0ffba3dcef423dc71a17e98be26192f8aa8654702e9a2cdc9dbfc8ec960fbf1a126c411efef6f95dc1a19c518e  0009-shunt-manager-Add-a-lock-to-safely-access-the-list-o.patch
+6e11b006b4fd0c6d000ff301ce18170bf9540f567ada2eb23f0f1c705be8d0f9299364313249cef5528858e75c10ba9d65315c941b49cb12ae07808d3b6e1faa  0010-shunt-manager-Remove-stored-entries-if-installation-.patch
+2a5503558dcfe654335d9b6b7056e9888b2304389bb76369b8222d54add6c8a9895ab175701eeb636c42f0df53d1078fdae7a9f11167fc2beadad82de68b0e4c  0011-shunt-manager-Add-flush-method-to-properly-uninstall.patch
+4e3ac34b2ecca6c1eefd9354a96a1a1fe7499571d2c5756c1cc889c23e125073517c6af57047de5b96bbc6acf9c6bb8c677df4206633f67551336fa8e62c77fb  0012-daemon-Flush-shunts-before-unloading-plugins.patch
+f643be8dbc32c27f2c31ac91612ae7d2f1a34e9387257d1247cd8c7fb8e5b9c58fc0b8448dd692723a6f7f2ac4d4629ffa2c440c40f5f1bfb550f1cc526b3916  0013-ike-rekey-Reset-IKE_SA-on-the-bus-after-destroying-n.patch
+bd161f1d4fa2881c8c07c2b7bccc0b9f06a99b12203d00329c8295f8a5ebe49f6cf27eca286ddd3c9e443fe132c64cae6849d691ddeda49b5fe716aebc73441e  0014-ike-rekey-Reset-IKE_SA-on-bus-before-sending-CREATE_.patch
+3f8c5ed171eb7c99218005b038ff0e0bc23841aab76cb97fbb7b8a3091b9f5ba318bd23c347de42bd969ac599f3d5f1b6bcf5110d5e23643858b24a719374f50  0015-ike-rekey-Fix-cleanup-call.patch
+bdc74e2b6f91e94aa0041927ff5cf3f2f5d67d5d37a0c389a2b6328919bd9f2f0376957676fd359009117a1d01cd06ecfadb7151bd7875c1df5cb82e159a378a  0016-ike-Fix-memory-leak-if-remote-address-is-kept.patch
+2d667eeba6d567008d8fe27d4dafa9a913c7aafa096258d7b5c95e2d8428e9dc8a40ace9e729a3d323e8d639d2ae3dae945904f90a39076c5ca5ddba7d70a0b6  0101-kernel-netlink-Actually-verify-if-the-netlink-messag.patch
+539bfec16350c035f7ce2f3551b52ba2e22c75146a6c1494f4b25ec283f2245b7a03be9470c0e0cd3e6fc368bcf1bda60ce8166928737ab396e6cf88ffafaf79  0102-kernel-netlink-Use-the-PAGE_SIZE-as-default-for-the-.patch
+b81fed84f361862c618fdfd9b2993dac3bcb4b298d806523ee9c8f47b1f5b0b679426eaeed8bc88ab1635ba30f9ff0ca9945aa264b3213561548648d64eb25ae  0201-ike-Also-track-initiating-IKE_SAs-as-half-open.patch
+9a2cb61c55a03977fc4bce42fdf043706498c86d69ea094852735b2ef525fbc0f81bad33aad7afc29ef301f3e2146746b56f458980529057e05007e0bab7b972  0202-controller-Optionally-adhere-to-init-limits-also-whe.patch
+95e3544a87bf503ed17059298ec6330501f39a2210e583fed59c5d03ef25b8d8227317016bf0181e49c87a7e36e1d902b0b24bda184d2166f3ad5b79166ce0dd  0203-vici-Add-get_bool-convenience-getter-for-VICI-messag.patch
+055b7769b0f587a77585ccf8e44c30fdf0981a1418f8e426eb696cfde671ac0013b355fdfb9e73ed3605c97a3a8c5f8ac38a2a0a137a5b87f9d6491752254543  0204-vici-Optionally-check-limits-when-initiating-connect.patch
+6b01e9810566e4f928fa72f01b5fa6cdbddaf1045433cb5b73b5a3d1cd73260ff195709e4d46384c2aa6540e4e62ad9021d9cad19b2061bc0153581e74cf2d0e  0205-ike-Adhere-to-IKE_SA-limit-when-checking-out-by-conf.patch
+8788fb376eaf57d9f277cac785db08578de3992e2484e7ab21ec044bc91000565ecb2adae4d2632f43ca6ed76519fd4422d86a3ba07a499594fbd7a61298458c  0301-ikev1-Assign-different-job-priorities-for-inbound-IK.patch
+86f244b3d8b35e8b9e25692554b7e8711bc663843e316e8895b340b3bd567c38543d24367250c93910b5d9462a2901bfc7717b5e3824f4682b4c736d33450834  0401-printf-hook-builtin-Fix-invalid-memory-access.patch
+2522571163b1d6de0aae2e2c1c2db69c52c3ff76e27a383e8a01e0933a0c0a06212168b1356308d6fd548aa7416d88ecd2bcfc79d3391ff17e6c799e83c5f88d  1001-charon-add-optional-source-and-remote-overrides-for-.patch
+ccf60c52d75b3f2eff719fbac1403eb141029651fccf2a1927ec4dffc0ccdc49c061a4971c38a0f37a32b2a53aa79422e17f3f993c48ebbcd07840a867c15881  1002-vici-send-certificates-for-ike-sa-events.patch
+1ea845551c7da2a7817e34508b0da3f3f0bba879f3b95d08c8db0a6b32adaf50363556daa6ee2e0f11c1ee6c41077d39ba54dbd40e457a02a991add19fe115ef  1003-vici-add-support-rekeying-events-and-individual-sa-s.patch
+e65579093692ca58314245d1dd3e5b4bdbff0603e5dc7baf3f80d7d9f415f62ae1656ef67da8a36efdec58235b6b1862d63c13991f1e5fefc02d8ee39d6dc9b6  1004-vici-support-asynchronous-initiation.patch
 723aad9269ae7da54b1d551b290c80951c3b779737353fa845c00d190c9ef6c6bc406d8ed22254a27844985b7ffaa12b99acce91ec0b192caf639c81b06bf771  2001-support-gre-key-in-ikev1.patch
 b56008c07b804dacb3441d3802880058986ab7b314297fe485649a771861885b9232f9fd53b94faa3388a5e9330e2b38a86af5c04f3ff119199720043967ec64  strongswan.initd
 6f3abaaa8da0925f06cdd184fdf534518e40c49533dba427dbf31dbe88172e5626bdc9aadf798d791f82fbded08801c1f565d514e2c289e1f28448d0c2e72b79  charon.initd"