fix test config
Merge remote-tracking branch 'turk/master'
Fix for bug#1308: forceencaps= setting does now show up in status output.
update CHANGES for bug #1308 fix
Fix the IKEv2 crasher seen in the 2nd update to issue #1329.  We need
to allow complete_v2_state_transition() to handle errors with reason for
failure (as described in commit 3bdc91faf5d492e65ceeaede9320f2b81c779fb1),
and to send an error response to the peer.  Continue to abort for the
STF_TOOMUCHCRYPTO case which is called out separately, and for other
cases where state is expected. Note that DoS detection and control should
be handled at a higher level.

Signed-off-by: Tuomo Soini <tis@foobar.fi>
update CHANGES for bug #1329 fix
Fix for three AES-GCM issues with key lengths 128, 192, 256 bits and IV
of 8, 12, 16 bytes as per RFC 4106.

1. AES-GCM for key length 256 for all 3 variants
(IV of 8, 12, 16 bytes) does not work.

2. AES-GCM negotiation for ESP during IKE exchange does not
inter-operate with any other implementation, because Openswan
sends wrong key length values. RFC 4106 defines that key lengths of
128, 192, 256 should be used during IKE exchange, whereas key
lengths + 4 bytes should be calculated as final keys to be sent
to kernel for ESP. However, Openswan sends key length + 4 bytes
during IKE exchange and breaks interop with other implementation.

3. RFC 4106 only allows 3 key lengths of 128, 192 or 256 bits, but
Openswan lets configure any key length which should not happen, and
configuration should be limited to only the specified lengths in
the rfc.

Signed-off-by: Tuomo Soini <tis@foobar.fi>
update CHANGES for AES-GCM fix
mention bash explicitely
updates kernel config to remove VDE
switch from cogito to git-porcelain
do not store CA private keys which are regenerated
use plain config for plain kernel
added netkey kernel
turn off VDE on default kernels, the libraries may not be installed
new initrd gives prompt before single user login, deal with that
relpath changes
Fix for the issue where ipsec help shows the list twice (rhbz 524146, 509318)
Fixes to solve interop issues between cisco ASA and openswan in aggressive mode.
IKEv2 RFC4306/5996 related changes
Reading password from a file when creating keys.