[strongSwan] Problem observed during traffic selector narrowing

[Martin Willi]

Hi,

> s-gw-1 has higher IP address range but its protocol range is smaller
> and vice versa 

I indeed could reproduce the issue. Seems that the subset matching was
not correct when selecting a config in this specific case. I've pushed a
fix [1] to master.

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=246e2bed