Merge branch 'debian-testing'

These changes update the integration test system.  It previously was based
on a pretty much unmaintainable Gentoo root image and the dated UML
virtualization technology.  Among many other changes the test environment
is now based on KVM and uses reproducible Debian-based guest images.

Conflicts:
	NEWS

diff --cc NEWS
index d644904b5eadfdff1156116c9cfeefe7a6a0d350,4692b5d1a5072124496fd0794705ed4be729583c..95f7e1c608138aac0c88f668a90408af80152a28
--- 1/NEWS
--- 2/NEWS
+++ b/NEWS
@@@ -30,22 -27,9 +30,25 @@@ strongswan-5.0.
    batches can be triggered and monitored externally using the
    "ipsec load-tester" tool.
  
 +- PKCS#7 container parsing has been modularized, and the openssl plugin
 +  gained an alternative implementation to decrypt and verify such files.
 +  In contrast to our own DER parser, OpenSSL can handle BER files, which is
 +  required for interoperability of our scepclient with EJBCA.
 +
 +- Support for the proprietary IKEv1 fragmentation extension has been added.
 +  Fragments are always handled on receipt but only sent if supported by the peer
 +  and if enabled with the new fragmentation ipsec.conf option.
 +
 +- IKEv1 in charon can now parse certificates received in PKCS#7 containers and
 +  supports NAT traversal as used by Windows clients. Patches courtesy of
 +  Volker Rümelin.
 +
 +- The new rdrand plugin provides a high quality / high performance random
 +  source using the Intel rdrand instruction found on Ivy Bridge processors.
 +
+ - The integration test environment was updated and now uses KVM and reproducible
+   guest images based on Debian.
+ 
  strongswan-5.0.1
  ----------------