[strongSwan-dev] [PATCH] child-sa: do not install unneeded transport mode policies

[Martin Willi]

> > If a transport mode wildcard policy is installed, separate per
> > child-sa with expanded dynamic entries is not needed. 

> Forgot to mention that this is on top of trap-sa branch.

Tobias probably can comment better on that one.

> I should probably send the my whole set as a patchset, or pull request.

I personally prefer email patchsets, but pull requests are fine as well.

> Oh, and there's bug in "swanctl --log" (and also the new --monitor)
> that if the daemon exists, swanctl never exists or reconnects.

Yes, that currently does not work. Probably requires some changes to
libvici itself, as socket handling is done asynchronously.

Regards
Martin