[Swan-commit] Changes to ref refs/heads/master

[D. Hugh Redelmeier]

New commits:
commit 06153610adef409206289b2e29c044f69b115178
Author: D. Hugh Redelmeier <hugh at mimosa.com>
Date:   Fri Dec 26 17:32:20 2014 -0500

    Muck about with the fine points of policy lset_t matching
    
    - Make find_host_connection more rigorous in matching required policy.
    
    - Some callers of find_host_connection need to step to the next
      matching connection with a matching policy, add
      find_next_host_connection to do that.
    
    - Ditch the imaginary distinction between aggr_inI1_outR1_psk and
      aggr_inI1_outR1_rsasig: the two entries were indistinguishable.
    
    - Fixed comments in microcode for Aggressive mode.
    
    - Simplified pick_initiator.
    
    - Simplify collect_rw_ca_candidates
      + replace find_host_connection call with find_host_pair call
        because policy filtering was not used
      + simplified loop logic
      + eliminated reference parameter requiring caller-initialized variable;
        made corresponding simplification to callers
    
    - POLICY_IKEV1_DISABLE => POLICY_IKEV1_ALLOW
      This caused a lot of changes to tests' reference output