make SAC message padding filterable

svn path=/trunk/; revision=53828
Add missing consts.

svn path=/trunk/; revision=53829
add a decryption test for DVB-CI to the testsuite

svn path=/trunk/; revision=53830
Fix some cases where STR_UNICODE was used with FT_DOUBLE.

svn path=/trunk/; revision=53831
Use strutil xml_escape() function

svn path=/trunk/; revision=53832
Note what the two new character encoding tables in charsets.c are.

svn path=/trunk/; revision=53833
Add WTAP_ENCAP_NETLINK which maps to DLT_NETLINK /253/

svn path=/trunk/; revision=53834
Reject the packet if data is NULL.

svn path=/trunk/; revision=53835
DTLS decryption enhancements.  Bug 9499 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=9499)

From Hauke Mehrtens

1. dtls: set ssl_set_server() in DTLS dissector so wireshark knows if this is client or server
2. SSL: add decrypt support for CCM and CCM_8 Ciphers per rfc 6655
3. dtls: add psk decrypt support

svn path=/trunk/; revision=53836
Add ENC_ISO_8859_1.

Move the Wikipedia links for the code page layouts in front of the
tables whose contents reflect the code page layouts.

svn path=/trunk/; revision=53837
dlts: add cipher version for OpenSSL pre 0.9.8f

OpenSSL pre 0.9.8f uses the TLS version 0x0100 and is not completely
compatible with DTLS 1.0 or 1.2. One difference is that the encrypted
pre master from TLS 1.0 does not have an own length, which is needed by
TLS and DTLS 1.0, this makes decrypting impossible. This patch makes it
possible for the code to distinguish between this OpenSSL version and
real DTLS 1.0, because they are not using the same code any more. This
is needed to fix the snakeoil-dtls test.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
dtls: fix buffer overflow in mac check

With SHA256 32 bytes and with SHA384 48 bytes are needed for the hash
in dtls_check_mac(), but it only had 20, which was enough for SHA1.
In dtls_check_mac() ssl_hmac_final() is called with a buffer of 20
bytes, but it needed more, which caused a buffer overflow.

This patch also replaces the magic values with a constant and adds a
assertion which should warn if such a problem occurs again like when
SHA512 will be added.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
dtls: add support for pre master secret file

This adds support to read the pre master secrets from a log file like
it is supported for SSL/TLS.
update cipher list
dtls: dissect tls extensions

This adds dissection for more TLS extensions. The code was mostly
copied from the SSL dissector.

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
tmp: add basic support for TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8 and raw public keys

Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>