upgrade 1.9x -> 2.00 support and version 2 issue

I just noticed my crypto was off, and noticed:

[root@kgbvax root]# service ipsec start
ipsec_setup: (/etc/ipsec.conf, line 9) we only support version 2 ipsec.conf files -- `start' aborted

ipsec --version
Linux FreeS/WAN U2.00-pre6/K(no kernel code presently loaded)

Are we really not going to support running 2.x on 1.x config files? This
is a setup with just plain static tunnels, and I don't see any reason
why it shouldn't work. I can understand OE would break, since it changed
so much, but do we have to break simple static tunnels?

Also, it would be nice if it had installed an ipsec.conf-new or something
for me to peek at the new syntax.

That said, I see (at least in the source):
/usr/src/freeswan-2.00-pre6/doc/ipsec.conf.2_to_1

Why not use that and create our custom ipsec.conf.new, and then after
'make install' tell the user to compare the two and see if that's
acceptable to him to mv?

Also, the ipsec.conf.2_to_1  starts with:

version 2
# If you put this in front of a 1.x ipsec.conf, it should work 
# within 2.x.


# Merge this with your existing config setup.  Allot these values
# to any you have not explictly defined.

config setup

This is rather confusing, since the "if you put this in front" remark
is (I think) only about the "version 2" line, and not about the whole
thing, and people will confuse the remark to mean to put the entire
file above their original, and end up with two setup and default sections.

I guess the only reason it is printed below the version 2 is because
the version 2 has to appear as first line for pluto. I think this is quite
a bad confusing design hack. If this matters to pluto, can't we just do
one pre-parse run that just removes all empty lines and lines starting
with a hash? That way we can start with comments again, so it all makes
sense, AND pluto, apart from the pre-parse, can keep it's current logic
of "first line is version 2".

Alternatively, the new setup and %default sections could be commented
sections instead, so indeed silly users like me CAN put the entire file
in front of their old config.

Paul, annoyed it took him four days to notice his extrusion had turned
into a simple NAT :(
-- 
God devised pigeons as a means of punishment for man. Probably after
the destruction of Sodom and Gomorrha he wanted to make sure that people
would never again feel comfortable enough in a city to repeat the sins
committed there, and he created the pigeons as a means to make the city
dwellers' lives more miserable, as a constant reminder of their past sins.