Update to libreswan-5.3

Maintenance and bugfix release.
- Only use NSS's certificateUsageIPsec, not certificateUsageSSL
- fix CISCO's split support (requires cisco-split=yes)
- share-lease=yes|no (default yes) to share XAUTH/ModeCfg lease IP on multiple connections
- CRL code maintenance
- Remove unused _stackmanager
- Merge addconn and whack parsers

Originally written by Paul Wouters in:
df55b7d4ee

Resolves: RHEL-102733
Signed-off-by: Daiki Ueno <dueno@redhat.com>

.gitignore

@@ -66,3 +66,5 @@
 /libreswan-5.1.tar.gz.asc
 /libreswan-5.2.tar.gz
 /libreswan-5.2.tar.gz.asc
+/libreswan-5.3.tar.gz
+/libreswan-5.3.tar.gz.asc

libreswan.spec

@@ -29,7 +29,7 @@
 Name: libreswan
 Summary: Internet Key Exchange (IKEv1 and IKEv2) implementation for IPsec
 # version is generated in the release script
-Version: 5.2
+Version: 5.3
 Release: %autorelease
 # The code in lib/libswan/nss_copies.c is under MPL-2.0, while the
 # rest is under GPL-2.0-or-later
@@ -45,7 +45,6 @@ Source5: https://download.libreswan.org/cavs/ikev2.fax.bz2
 %endif
 
 Patch1: libreswan-4.15-ipsec_import.patch
-Patch2: libreswan-5.2-pexpect-no-ike-sa-for-orphan-child.patch
 
 BuildRequires: audit-libs-devel
 BuildRequires: bison

sources

@@ -1,5 +1,5 @@
 SHA512 (ikev1_dsa.fax.bz2) = 627cbac14248bd68e8d22fbca247668a7749ef0c2e41df8d776d62df9a21403d3a246c0bd82c3faedce62de90b9f91a87f753e17b056319000bba7d2038461ac
 SHA512 (ikev1_psk.fax.bz2) = 1b2daec32edc56b410c036db2688c92548a9bd9914994bc7e555b301dd6db4497a6b3e89dc12ddf36826ae90b40fcde501a5a45c0d59098e07839073d219d467
 SHA512 (ikev2.fax.bz2) = 0d3748d1bd574f6f1f3e4db847eca126ce649566ea710ef227426f433122752b80d1d6b8acf9d0df07b5597c1e45447e3a2fcb3391756e834e8e75f99df8e51e
-SHA512 (libreswan-5.2.tar.gz) = 5c87edc879914158ba9c4c2a0edcd6fac0787b16d3c6a50c268cbd675c51cdec94e509031bc226680c0d40bd3375d73007cae5ee0588c136292e3f34cb759694
-SHA512 (libreswan-5.2.tar.gz.asc) = ce5e053f8cbe8b2981100e3948975930c160db9292734983159cfc93cc336e39e867a3ef56c4bd03f0bdc005af61165ebc42c1e2b86dc97e22ae2f0be84d4136
+SHA512 (libreswan-5.3.tar.gz) = 338fb82a9969da8fa78f64ec9eda0e3dcd216d6b8333a6f966ba839e31d3eb5fdd94613f0fff934be16ff8d84f6f4265c8b35f37c642569e042f65a58038ba0d
+SHA512 (libreswan-5.3.tar.gz.asc) = b55d47abe69222f2b91b1fd48f5a6910a5469a4bea21fb7f3231ac036af378f94495405efdacb67eddf1fffa018f76db9c1944336bdedfb59f96a369e2362684