Removed unused -DPLUTO from CFLAGS
building: phase out USE_AGGRESSIVE / AGGRESSIVE

We always compile in aggressive mode. In the future, when compiling
without IKEv1 this code will be left out with the rest of IKEv1.
update changes
removed bool vid_struct_init now that we no longer crash on it
Remove USE_IKEPING - always built it
updown.netkey: don't rewrite resolv.conf when no DNS received
Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan
updown.klips/mast: don't rewrite resolv.conf when no DNS received
fixup prelink directory permissions
packaging: add spec file for RHEL7
edit CHANGES
- fix a case where dpdbuf was used but not set
- eliminate a useless gcc warning
- fix oeconns.c to avoid gcc warnings
- create macros to reduce clutter of oeconns.c initializers
- make more things in oeconns.c file static and const
Replace most sprintf calls with snprintf calls.
This replaces potential buffer overflow with truncation.
In many cases, the truncation is silent (bad!).
There remains a mystery in programs/pluto/vendor.c.
Most uses of strncpy are mistakes.  This fixes a bunch.
It marks questionable areas with ???.
in Pluto, replace strcmp with streq where appropriate
Cleaner code to check for OCF
Support procfs on linux-3.10, rewrite and cleanup

Convert all the proc handling to seq_* functions.  This has been supported
since 2.4 kernels and is much simpler/cleaner and easier to maintain.

Remove any pre 2.4 procfs support, its just pointless.  We have lots of
other cases where pre 2.4 support has been dropped.

Cleanup all procfs related code as much as practical and hopefully
maintaining the coding style :-).

/proc/net/ipsec/birth/ipv4 /proc/net/ipsec/birth/ipv6 are gone.
The only code or any kind referencing them was the procfs implementation to
read and write them.  The testcases that check for these will need to be
removed/updated.

These changes were compile tested on linux-2.4.34 and linux-2.6.32.
They were runtime tested on linux-3.10.
Fix newer kernels after wrong older kernel change

Never assume ALLCAPS means something is a macro, sigh :-)
PDE_DATA() came in at linux-3.9-rc4 as an inline function.
xauth: remove the ipv6 items from MODECFG_SET_ITEM