Merge from head r253514,r253680,r253805,r254650:
  ---------------------------------------------------------------------
  r253514 | des | 2013-07-21 10:59:56 +0400 (вс, 21 июл 2013) | 5 lines

  Use the correct request syntax for proxied (tunneled) HTTPS requests.

  PR:             bin/180666
  MFC after:      3 days

  ---------------------------------------------------------------------
  r253680 | des | 2013-07-26 19:53:43 +0400 (пт, 26 июл 2013) | 7 lines

  Implement certificate verification, and many other SSL-related
  imrovements; complete details in the PR.

  PR:             kern/175514
  Submitted by:   Michael Gmelin <freebsd@grem.de>
  MFC after:      1 week

  ---------------------------------------------------------------------
  r253805 | des | 2013-07-30 17:07:55 +0400 (вт, 30 июл 2013) | 5 lines

  Include an Accept header in requests.

  PR:             kern/180917
  MFC after:      1 week

  ---------------------------------------------------------------------
  r254650 | des | 2013-08-22 11:43:36 +0400 (чт, 22 авг 2013) | 8 lines

  Even though it doesn't really make sense in the context of a CONNECT
  request, RFC 2616 14.23 mandates the presence of the Host: header in
  all HTTP 1.1 requests.

  PR:             kern/181445
  Submitted by:   Kimo <kimor79@yahoo.com>
  MFC after:      3 days

  ---------------------------------------------------------------------

Reviewed by:	des
Fix mismerge introduced in r256230, adding auditdistd back to
etc/rc.d/Makefile.

Submitted by:	Herbert J. Skuhra
Pointyhat to:	gjb
MFC r255944:

  Use MK_SSP=no after including bsd.own.mk to disable SSP instead of user-knob
  WITH[OUT]_SSP to avoid hitting an error if user has WITH_SSP in their
  make.conf. Ports now use this knob.

    make[7]: "/usr/src/share/mk/bsd.own.mk" line 466: WITH_SSP and
    WITHOUT_SSP can't both be set.

Approved by:	bapt
Merge r253680,253805 from head:
  ----------------------------------------------------------------------
  r253680 | des | 2013-07-26 19:53:43 +0400 (Fri, 26 Jul 2013) | 7 lines

  Implement certificate verification, and many other SSL-related
  imrovements; complete details in the PR.

  PR:             kern/175514
  Submitted by:   Michael Gmelin <freebsd@grem.de>
  MFC after:      1 week

  ----------------------------------------------------------------------
  r253805 | des | 2013-07-30 17:07:55 +0400 (Tue, 30 Jul 2013) | 5 lines

  Include an Accept header in requests.

  PR:             kern/180917
  MFC after:      1 week

Reviewed by:	des
MFC 253450:
Properly handle I/O windows in bridges with the ISA enable bit set.  These
beasts still exist unfortunately.  More details can be found in other
references, but the short version is that bridges with this bit set ignore
I/O port ranges that alias to valid ISA I/O port ranges.  In the driver
this requires not allocating these alias regions from the parent device
(so they are free to be acquired by ISA devices), and ensuring no child
devices use resources from these alias regions.
MFC r256061:
Add padding to match the compat32 struct stat32 definition to the real
struct stat on 32bit architectures.
Merge remote-tracking branch 'upstream-github/stable/9' into stable/9