KLIPS: SAref patches for Ubuntu kernel 3.11.0-15.25

Signed-off-by: Paul Wouters <pwouters@redhat.com>
- each case body should start on a new line
- delete nss_hmac_mech (it was unused and commented out)
- tidy debugging code in calc_dh_shared
Changed PR_ASSERT() calls to passert() calls.

Removed a few DEBUG defines that were added for PR_ASSERT()
DPD/Liveness:
    - remove any ikev2 liveness events with state deletion
    - simplify local dpd variables, add dpd_enabled_locally() helper function
Remove hack for broken SSH-Sentinel NAT-T draft 00 implementations

Everyone has moved to NAT-T draft 02/03 or NAT-T RFCs now.
testing: update fedora link in kvmsetup.sh.sample
cleaned out docs/diagram/
documentation: started cleanup/update of pluto.8.xml
documentation: purged most obsoletes docs. converted very little to wiki
Merge branch 'master' of vault.libreswan.fi:/srv/src/libreswan
sync up CVEs in security/
documentation: updated/deletes more doc files
ipsec command: remove root uid check - it will fail when missing powers

This allows for some additional commands that don't actually require
root (eg when not talking to pluto) or allow non-root users some access,
such a DNS server plugin running as user "unbound")
ipsec initnss: interpret additional argument as directory

This allows for NSS initialisation at non-default locations, eg:

ipsec initnss /tmp/dir/

Since -d configdir and --config configdir are common options for nss
utils, we silently eat those if used.
updated README.nss
added stub README.x509 pointing to README.nss
documentation: move docs/README.nss to the main directory.
packaging: update documentation files and includes docs/examples
updated CHANGES
documentation: updated INSTALL