xauth: make logging more consistent

Now when you run ipsec auto --up xauthconn you will see what you received
for dynamic IP, DNS servers, DOMAIN, routes and you get to see the xauth
login banner.
NETKEY: rhbz#742126 Use protocol and ports for priority

(fixes most of the need for lsbz#83 as well)

For XFRM/NETKEY we calculate a priority and match on longest prefix
first. This match did not take into consideration ports or protocols,
so a two conns with the only difference of leftprotoport=17/1701 would
not get priority. This caused passthrough routines that were only more
narrowed by protoport to not get priority. With the same priority as
the routed tunnel, order of loading would determine which one was picked.
testing: loopback-pluto-06 shows problem of %any causing mismatch
testing: loopback-pluto-05 tests the XFRM/NETKEY priority fix

See rhbz#742126
updated TESTLIST
Merge branch 'master' of vault.libreswan.org:/srv/src/libreswan
IKEv1: fixup Aggressive Mode vendor id sending

Use the same numvidtosend construction that is used for Main Mode and
IKEv2.

Added sending fragmentation VID when fragmentation=yes
IKEv1: Add support for cisco_unity=yes

This per-connection option will enable sending the Cisco UNITY vendor id.
It modifies no local behaviour. It might modify the peer's behaviour.

This is an experimental option and might be removed again in the future.
updated changes
updated changes
pluto: resolve remote_peer_type=cisco crasher

This crasher could happen when the remote cisco was not properly configured
as XAUTH/ModeConfig server giving back an IP+route. The crashes happens after
IKEv1 authentication, so cannot be used maliciously.
pluto - fix dpdaction=restart to always perform restart_by_peer
INTEROP: Fix compatibility with NAT-T and remote_peer_type=cisco

Seems there are still plenty of old Cisco's around that don't have
RFC3974 NAT-T vendorid support. For those we need to send the old
nat-t draft VIDs. We did not send those when remote_peer_type=cisco
updated changes
IKEv1: DPD action "restart" always restarts all SA's by peer.

dpdaction=restart_by_peer renamed into dpdaction=restart.

The value restart_by_peer can still be specifief for backwards compatibility.
updated changes
update dpdaction= XML file
whack - remove DPD_ACTION_RESTART_BY_PEER references
ietf_constants.h: minor update of some added modecfg attributes
minor cleanup for restart_by_peer removal