[Swan-commit] Changes to ref refs/heads/master

[Paul Wouters]

New commits:
commit f3be0aa064fe2d01c08846654820ceae9a168638
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Dec 3 09:37:06 2014 -0500

    documentation: regenerated ipsec.conf.5

commit 749119a1f574956f76a4797fdb479ac2e428e084
Author: Paul Wouters <pwouters at redhat.com>
Date:   Wed Dec 3 09:34:28 2014 -0500

    documentation: remove bogus example of ike=modp1536 from ike.xml

commit 8bf55ce7693ce4abdd15ad545e6e5101fbf39745
Author: Paul Wouters <pwouters at redhat.com>
Date:   Thu Nov 27 23:24:25 2014 -0500

    packaging: Use the certutil --empty-password option instead of tempfile

commit 8e1c9a42bbe0b83ad5c6956076099f3acefb4c41
Author: Paul Wouters <pwouters at redhat.com>
Date:   Thu Nov 27 23:20:54 2014 -0500

    IKEv2: do not pad IKE messages to a multiple of 4 octets
    
    In IKEv2, there is no padding specified in the RFC and some
    implementations will reject IKEv2 messages that are padded. As there
    are no known IKEv2 clients that REQUIRE padding, this commit changes
    the padding code to never perform padding for IKEv2.
    
    The man page for the ikepad= option was updated to reflect this.
    
    The option has not been renamed to be ikev1 specific - I'm a little worried
    we will eventually find IKEv2 implementations that require padding :/