ike: Remove redundant check for local NAT when handling changed NAT mappings
ike: Do remote address updates also when behind static NATs

We assume that a responder is behind a static NAT (e.g. port forwarding)
and allow remote address updates in such situations.

The problem described in RFC 5996 is only an issue if the NAT mapping
can expire.
testing: Enable nat table for iptables on 3.17 kernels
libimcv: Fix harcoded IMCV_DEFAULT_POLICY_SCRIPT name

I came across an issue with src/libimcv/imcv.c where
IMCV_DEFAULT_POLICY_SCRIPT is hardcoded.

It fails where ipsec_script is renamed to, for example, strongswan from
default ipsec.
charon-systemd: Typo in log message fixed
watcher: Doxygen comment fixed
libimcv: Fix Doxygen comments after merging libpts into libimcv
libimcv: Remove reference to libpts
android: Remove references to libpts
libimcv: Updated Android.mk to latest Makefile.am
libimcv: Add fallback if IPSEC_SCRIPT is not defined

This is the case on Android.
android: Update receive_message() to new imc_msg_t.receive() signature
android: libpts does not exist anymore, don't attempt to load it
android: Implement get_contracts() method in IMC state object
travis: Build-test updown and ext-auth plugins for Windows
constraints: Add certificate policy and policy mapping unit tests
constraints: Don't reject certificates with invalid certificate policies

Instead of rejecting the certificate completely if a certificate has a policy
OID that is actually not allowed by the issuer CA, we accept it. However, the
certificate policy itself is still considered invalid, and is not returned
in the auth config resulting from trust chain operations.

A user must make sure to rely on the returned auth config certificate policies
instead of the policies contained in the certificate; even if the certificate
is valid, the policy OID itself in the certificate are not to be trusted
anymore.
constraints: Add inhibitPolicyMapping tests
constraints: Add inhibitAnyPolicy tests
constraints: Add requireExplicitPolicy tests