fix test config
Merge remote-tracking branch 'turk/master'
Fix for bug#1308: forceencaps= setting does now show up in status output.
update CHANGES for bug #1308 fix
Fix the IKEv2 crasher seen in the 2nd update to issue #1329.  We need
to allow complete_v2_state_transition() to handle errors with reason for
failure (as described in commit 3bdc91faf5d492e65ceeaede9320f2b81c779fb1),
and to send an error response to the peer.  Continue to abort for the
STF_TOOMUCHCRYPTO case which is called out separately, and for other
cases where state is expected. Note that DoS detection and control should
be handled at a higher level.

Signed-off-by: Tuomo Soini <tis@foobar.fi>
update CHANGES for bug #1329 fix
Fix for three AES-GCM issues with key lengths 128, 192, 256 bits and IV
of 8, 12, 16 bytes as per RFC 4106.

1. AES-GCM for key length 256 for all 3 variants
(IV of 8, 12, 16 bytes) does not work.

2. AES-GCM negotiation for ESP during IKE exchange does not
inter-operate with any other implementation, because Openswan
sends wrong key length values. RFC 4106 defines that key lengths of
128, 192, 256 should be used during IKE exchange, whereas key
lengths + 4 bytes should be calculated as final keys to be sent
to kernel for ESP. However, Openswan sends key length + 4 bytes
during IKE exchange and breaks interop with other implementation.

3. RFC 4106 only allows 3 key lengths of 128, 192 or 256 bits, but
Openswan lets configure any key length which should not happen, and
configuration should be limited to only the specified lengths in
the rfc.

Signed-off-by: Tuomo Soini <tis@foobar.fi>
update CHANGES for AES-GCM fix
Merge bugfix from Libreswan repo