Use new strongSwan HA kernel patchset keeping iptables ABI

Allows us to install stock debian iptables without the need for patching and
compiling our own.

testing/testing.conf

@@ -22,7 +22,7 @@ KERNELVERSION=3.8.1
 KERNEL=linux-$KERNELVERSION
 KERNELTARBALL=$KERNEL.tar.bz2
 KERNELCONFIG=$DIR/../config/kernel/config-3.8
-KERNELPATCH=ha-3.8.patch.bz2
+KERNELPATCH=ha-3.8-abicompat.patch.bz2
 
 # strongSwan version used in tests
 SWANVERSION=5.0.3