Fix incorrect duplicate mlinks
ok bcook@
use the merged 4.4BSD.dist mtree if BSD.local is gone
More memory leaks and unchecked allocations; OpenSSL PR #3403 via OpenSSL
trunk. (note we had already fixed some of the issues in that PR independently)
Fix OID encoding for single components. OpenSSL PR #2556 via OpenSSL trunk.

(be sure to make cleandir and make includes before building)
sync
fix dacl->size_hi header change
Remove some duplicate directories.
This doesn't change the directory structure being defined.
ok deraadt@
tweak previous;
ok krw yasuoka
by popular demand, add back hamc-sha1 to server proposal for better compat
with many clients still in use. ok deraadt
Tolerate critical AKID in CRLs; OpenSSL PR #3014 via OpenSSL trunk, and
also update the comments to reflect what the code now does.
move all the feature settings to a common header.
probably ok beck jsing miod
no compression is also a feature of libressl
additional features: no buffer freelists and no heartbleed
In EVP_PBE_alg_add don't use the underlying NID for the cipher
as it may have a non-standard key size; OpenSSL PR #3206 via OpenSSL trunk.
In asn1_get_length(), tolerate leading zeroes in BER encoding.
OpenSSL PR #2746 via OpenSSL trunk
determine and use maximum file size instead of magical constants

ok guenther
i'm a dumbdumb. fix build.
Fix invocation of _OSC.  We were passing the capabilities in the wrong DWORD
and specifyig the wrong DWORD count.  Moreover we should not evaluate _PDC
if _OSC is present.  Might not be perfect yet, but what we had previously
was uterrly and totally wrong.

ok guenther@
Remove redundant check and wrong fix: fat.c checks already take care
about cluster chains.  If the user didn't want to fix them at that time,
he asks for trouble -- and these checks didn't help in all cases either.

discussed with and ok krw@
reboot(9): Add MI reboot entry function

Now, for kernel to "reboot" (reboot, halt, or shutdown), MD boot(9) is called
in some places.  This change introduces a new MI function reboot(9) which is
simply a wrapper to call MD boot(9).

OK kettenis@ deraadt@