kernel-netlink: Add global option to set MTU on installed routes
kernel-netlink: Add global option to configure MSS-clamping on installed routes
android: Report error if CHILD_SA rekeying fails
android: Reestablish IKE_SA if CHILD_SA rekeying failed
proposal: Fix equals()
child-cfg: Ignore duplicate proposals

If ESP proposals are added once with and once without DH groups
duplicates result during IKE_AUTH when DH groups are stripped.
android: Add DH groups to ESP proposals
android: Reduce CHILD_SA lifetime
Merge branch 'android-pfs'

Changes how CHILD_SA rekeying errors are handled in the Android app and adds
CHILD_SA proposals with DH groups.
ikev2: Properly keep track of pending MOBIKE updates

Because we only queue one MOBIKE task at a time, but destroy superfluous
ones only after we already increased the counter for pending MOBIKE updates,
we have to reduce the counter when such tasks are destroyed.  Otherwise, the
queued task would assume another task is queued when it is running and
ignore any successful response.
ikev2: Migrate number of pending MOBIKE updates

This will probably never be more than 1 since we only have one task queued
at a time and we don't migrate running tasks.
ikev2: Insert MOBIKE tasks at the front of the queue

In case we have no usable path to the other peer there is no point in
initiating any other tasks (like rekeying).
ikev2: Skip peer addresses we can't send packets to when looking for valid paths
ike-mobike: Skip peer addresses we can't send packets to when checking paths
ike-mobike: Add method to enable path probing
ikev2: Enable path probing for currently active MOBIKE task

This might not be the case if e.g. an address appeared but the old one
is still available but not actually usable.  Without this the MOBIKE
task would eventually time out even though we might be able to switch
to a working address.
ike-mobike: Return FALSE in transmit() if no path was available
ikev2: Defer path probing if no path is currently available

We do the same before initiating the task, so we should probably do it
too when we already initiated it, not just time out and destroy the SA.
ike-mobike: Allow calling transmit() even when not currently path probing

Path probing is enabled if the current path is not available anymore.
ikev2: Defer MOBIKE updates if no path is available