gnu: Move crypto packages from python to python-crypto.

* gnu/packages/python.scm (python-passlib, python2-passlib)
(python-py-bcrypt, python2-py-bcrypt)
(python-paramiko, python2-paramiko, python-ecdsa, python2-ecdsa)
(python-pycrypto, python2-pycrypto, python-keyring, python2-keyring)
(python-certifi, python2-certifi)
(python-cryptography-vectors, python2-cryptography-vectors)
(python-cryptography, python2-cryptography)
(python-pyopenssl, python2-pyopenssl)
(python-axolotl-curve25519, python2-axolotl-curve25519)
(python-axolotl, python2-axolotl, python2-slowaes)
(python-pyaes, python2-pyaes): Move to...
* gnu/packages/python-crypto.scm: ... here.  New file.
* gnu/local.mk (GNU_SYSTEM_MODULES): Add it.
* gnu/packages/admin.scm, gnu/packages/backup.scm,
gnu/packages/crypto.scm, gnu/packages/finance.scm,
gnu/packages/irc.scm, gnu/packages/jrnl.scm,
gnu/packages/messaging.scm, gnu/packages/openstack.scm,
gnu/packages/python-web.scm, gnu/packages/tls.scm,
gnu/packages/xorg.scm: Adjust accordingly.

cve: Use 'http-fetch/cached' instead of having custom caching.

That way CVE fetching benefits from 'If-Modified-Since' handling.

* guix/http-client.scm (http-fetch/cached): Add #:write-cache and
 #:cache-miss parameters and honor them.
* guix/cve.scm (%current-year-ttl, %past-year-ttl): Reduce.
(call-with-cve-port): Remove.
(write-cache): New procedure.
(fetch-vulnerabilities): Rewrite in terms of 'http-fetch/cached'.

download: Improve efficiency of 'write-request' over TLS.

This is another instance of <https://bugs.gnu.org/22966>.
The Microsoft-IIS/7.5 server at static.nvd.nist.gov would sometimes hang
when receiving our requests byte by byte.

* guix/build/download.scm (tls-wrap) [!guile-2.0]: Add 'setvbuf' call.

gnu: linux-libre: Update to 4.14.

* gnu/packages/linux.scm (%linux-libre-version): Update to 4.14.
(%linux-libre-hash): Update hash.
* gnu/packages/aux-files/linux-libre/4.13-arm.conf,
gnu/packages/aux-files/linux-libre/4.13-i686.conf,
gnu/packages/aux-files/linux-libre/4.13-x86_64.conf: Delete files.
* gnu/packages/aux-files/linux-libre/4.14-arm.conf,
gnu/packages/aux-files/linux-libre/4.14-i686.conf,
gnu/packages/aux-files/linux-libre/4.14-x86_64.conf: New files.
* Makefile.am (AUX_FILES): Update accordingly.

gnu: linux-libre@4.9: Update to 4.9.62.

* gnu/packages/linux.scm (linux-libre-4.9): Update to 4.9.62.

gnu: linux-libre@4.4: Update to 4.4.98.

* gnu/packages/linux.scm (linux-libre-4.4): Update to 4.4.98.

gnu: icecat: Add more fixes from upstream mozilla-esr52.

Add fixes for CVE-2017-7830, the remaining 1/2 changesets for CVE-2017-7828,
the remaining 1/19 changesets for CVE-2017-7826, and selected other fixes.

* gnu/packages/gnuzilla.scm (icecat)[source]: Add selected fixes from the
upstream mozilla-esr52 repository.
* gnu/packages/patches/icecat-bug-1348660-pt5.patch,
gnu/packages/patches/icecat-bug-1415133.patch: New files.
* gnu/local.mk (dist_patch_DATA): Add them.

gnu: icecat: Label patches to reflect CVE assignments.

Document that we include 18/19 changesets for CVE-2017-7826, and 1/2
changesets for CVE-2017-7828.

* gnu/packages/gnuzilla.scm (icecat)[source]: Rename patches to reflect CVE
assignments.

gnu: iproute2: Update to 4.14.1.

* gnu/packages/linux.scm (iproute): Update to 4.14.1.

gnu: gnucash: Use HTTPS for www.gnucash.org.

* gnu/packages/gnucash.scm (gnucash, gnucash-docs)[home-page]: Use HTTPS.

gnu: gnucash: Update to 2.6.18.

* gnu/packages/gnucash.scm (gnucash): Update to 2.6.18.

gnu: youtube-dl: Update to 2017.11.15.

* gnu/packages/video.scm (youtube-dl): Update to 2017.11.15.

gnu: geoclue: Use HTTPS for home page.

* gnu/packages/gnome.scm (geoclue)[home-page]: Use HTTPS.

gnu: geoclue: Update to 2.4.7.

* gnu/packages/gnome.scm (geoclue): Update to 2.4.7.

gnu: aria2: Update to 1.33.1.

* gnu/packages/bittorrent.scm (aria2): Update 1.33.1.

gnu: smartmontools: Mark up description.

* gnu/packages/admin.scm (smartmontools)[description]: Use @dfn.

gnu: smartmontools: Update to 6.6.

* gnu/packages/admin.scm (smartmontools): Update to 6.6.

gnu: devhelp: Update to 3.26.0.

* gnu/packages/gnome.scm (devhelp): Update to 3.26.0.

gnu: Add guile-wiredtiger.

* gnu/packages/databases.scm (guile-wiredtiger): New variable.

Signed-off-by: Ludovic Courtès <ludo@gnu.org>

download: Pass the timeout to 'ftp-retr'.

This ensures the timeout applies when connecting to the port returned by
PASV.

* guix/ftp-client.scm (ftp-list): Add #:timeout parameter.  Use
'connect*' instead of 'connect' and pass TIMEOUT.
(ftp-retr): Likewise.
* guix/build/download.scm (ftp-fetch): Pass TIMEOUT to 'ftp-retr'.