Revert "Revert "Revert "Revert "Always use XFRM_MSG_UPDPOLICY instead of XFRM_MSG_NEWPOLICY. This avoids""""

This reverts commit 39b7891e50fae053e8acebdc1f55af6408f8fdad.

Fixes bug #75

Without this code we fail to insert another policy with same subnets.
netkey: clarify comment on bug #75 fix
CHANGES: #75: Libreswan inserts wrong xfrm policies on some configurations [Tuomo]
* _updown.klips: Fix parse error introduced with b5cc4343f567
Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan
* testing: update basic-pluto-01 known good output

Now includes a line with "Total IPsec connections", as well as
receiveing the FRAGMENTATION vendorid
* testing: cleanup east/west conf for basic-pluto-01
* testing: basic-pluto-02 fixup as it likely was meant to be.

Since part of the "known good output" was missing, west specifically,
I have to take a guess at what this was supposed to do. I believe it
is meant to reject the connection on east because the eastnet-westnet
conn is explicitely not loaded, and the OE conn would not match such
subnets.
* building: @FINALCONFDDIR@ was not properly expanded in the ipsec cmd
Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan
* newhostkey: set default NSS dir for call to newrsakey

via @FINALCONFDDIR@ which becomes /etc/ipsec.d per default
* testing: fixup basic-pluto-03 test results

This test required a new north raw rsa key as the NSS db files never got
commited.

consoles taken from OUTPUT/*fixed* except for two manual changes that
still need fixing:

- mark tcpdump output as still needing a filter
- pretend we correctly identify all Libreswan vendorid's
  (instead of logging a "ignored vendorid [....])
* testing: Give north a new raw rsa key
* fix preprocessing filename comment for /etc/ipsec.conf