* testing : add check for stop-tests-now so we can interrup make check.
Merge branch 'master' of ssh://vault.foobar.fi/srv/src/libreswan
* testing: cleanup all final.sh scripts

Should probably be replaced by a smarter output script that we can run
on all hosts.

Importantly, the "cat /tmp/pluto.log" was removed everywhere because
we now just cp that log from VM to host. Additionally, the test for
core's now include numbered cores (core.1234) and we check for any
SElinux warnings.

Conflicts:
	testing/pluto/basic-pluto-02/final.sh
	testing/pluto/basic-pluto-04/final.sh
	testing/pluto/dpd-02/final.sh
	testing/pluto/dpd-03/final.sh
	testing/pluto/dpd-04/final.sh
	testing/pluto/dpd-06/final.sh
	testing/pluto/ikev2-04-basic-x509/final.sh
	testing/pluto/phase1-expire-02-reconnect-netkey/final.sh
	testing/pluto/tpm-accept-01/final.sh
	testing/pluto/tpm-accept-01b/final.sh
	testing/pluto/tpm-accept-02/final.sh
	testing/pluto/tpm-accept-03/final.sh
	testing/pluto/tpm-accept-04/final.sh
	testing/pluto/tpm-accept-05/final.sh
	testing/pluto/tpm-accept-06/final.sh
	testing/pluto/tpm-accept-07/final.sh
	testing/pluto/tpm-accept-08/final.sh
	testing/pluto/tpm-pluto-01/final.sh
	testing/pluto/xauth-pluto-07/final.sh
* stackmanager: if mtu of mast0 interface is 0, set it to 16260
* testing: add new sanitizer backgrounder.sed

This removes the variable pid from the output of background tasks,
such as lauches of "nc" on eastinit.sh

It removes strings like: ^[1] 1234
(upto 3 processes only, for more we assume its something else)
* testing: fixup ipsec-look-sanitize.sed

also sanitize esp.XXXXXXXX@ lines (and ah/comp)
* testing: account for dropped leading zero's in ipsec-look-sanitize.sed
* testing: Make date replacement a bit more robust for within ipsec look

But match more exactly using numbers to prevent matching other things
* building: Enable some more hardening features

- Enable -z now linker flag
- Added -Wformat-nonliteral -Wformat-security
- Changed -fstack-protector to -fstack-protector-all
* testing: run final.sh directly on initiator still on serial console

This is a workaround (and optimization) as it prevents some expect/flow
issues.
Merge branch 'master' of ssh://vault.foobar.fi/srv/src/libreswan
* testing : put the wait_pid initiator line back
* testing : fix the flow problem when running final.sh on respnder
    	    every sendline need a matching expect
* testing : add more timezones to look sanitizer
* testing: use raw format for ausearch so it does not display "<no matches>"

This ensures the output of final.nl is the same for "no audit tools insalled"
and "audit tools installed but no problem found"
* testing: SElinux update to avoid false positive audit avc messages

- No longer bind mount, but copy the host files in swan-transmogrify
  to allow us to relabel SElinux context.
- For Fedora/RHEL guests, add context= parameters to /etc/fstab for
  the /testing and /source mounts to provide proper SElinux context
  to avoid audit avc messages
- Wipe the audit log on boot in swan-transmogrify so previous SElinux
  audit warnings don't flag in the current test.
* parser: Added keyword type kt_obsolete_quiet

Same as kt_obsolete, but we only log a warning in full debug mode.
* parsing: turn oe= into kt_obsolete_quiet
* testing: Updated test case ipv6-v6-through-v6-klips-klips
* testing: updated ping sanitizer

The old ping command shows icmp_req= while the new ping command shows icmp_seq=

Allow either one.