* IKEv1: Support for sending IKE fragments

Signed-off-by: Paul Wouters <pwouters@redhat.com>
Merge branch 'master' into fragmentation
* testing: x509-pluto-frag-01 test case
removed duplicate ike fragmentation vendor id, racoon called it broken Microsoft ID: FRAGMENTATION
- also send VID_IKE_FRAGMENTATION when we are the responder
- increasing numvitosend must be done before adding the first vendorid, otherwise it never adds the rest
  (alternative put the always sent dpd vendorid at the end and set next=ISAKMP_NEXT_VID on all vendorids before)
removed unneeded debug log entry
* pluto: log ikev2-responder-retransmit in send_packet like IKEv1
* nat-t: add DBG_NATT debug line before send_packet()

because send_packet is called with verbose FALSE
Merge branch 'master' into fragmentation
* testing: added more x509-pluto-frag-0* tests

x509-pluto-frag-00 is used to confirm filtering UDP fragments
will cause problems.

x509-pluto-frag-01 is the default policy that should send/receive
ike fragments

x509-pluto-frag-02 uses ike_frag=force
* testing: added more x509-pluto-frag-0* tests

x509-pluto-frag-00 is used to confirm filtering UDP fragments
will cause problems. Both ends have ike_frag=no

x509-pluto-frag-01 is using the default policy of ike_frag=yes that
should send/receive ike fragments by both west and east.

x509-pluto-frag-02 uses ike_frag=force on west and ike_frag=yes on
east, so it should send out MAIN_I3 in fragments on the first go.

x509-pluto-frag-04 has ike_frag=yes on west, and ike_frag=no on
east, so west will not see the VID and should not send fragments.
* fragmentation: when we cannot access the md, pretend we sent it.

That way, on the next retry we have access to st->st_suspended_md
* testing: updated testcase psk-pluto-01
Merge branch 'master' into fragmentation
Merge branch 'master' into fragmentation
* XAUTH: remove modecfg* from sa_policy_bit_names

They were only removed from pluto_policy in commit c015d1a038546a5c32d9a36d16462d490108e254.
Merge branch 'master' into fragmentation
* mtustr was capped at 8 chars, not 16

As the compiler wisely told us:

In function ‘snprintf’,
    inlined from ‘show_one_connection’ at /source/programs/pluto/connections.c:3458:10:
/usr/include/bits/stdio2.h:65:3: warning: call to __builtin___snprintf_chk will always overflow destination buffer [enabled by default]

This cannot be exploited other than by whomever can edit the local ipsec
config, at which point you can already set leftupdown=/some/script that
runs as root. Still, not good :/
* fragmentation: fix for libreswan <-> libreswan  interoperability

When libreswan communicates with libreswan the ike fragmentation will
not start, because SMF_RETRANSMIT_ON_DUPLICATE is not set in case of
retransmission MAIN_I3.

Only call send_frags when send_packet is called for ike fragmentation.
Merge branch 'fragmentation' of vault.libreswan.fi:/srv/src/libreswan into fragmentation