It is not trivial to update libreswan to 3.22 because it has added a dependency
on ldns which currently depends on openssl 1.1.0, while the rest of libreswan
depends on openssl 1.0.2. It compiles, but may behave unpredictably at run time.
Tracking issue: #31696