When using a proxy for an https connection, validate the cert hostname
against the target hostname, not the proxy hostname.  Issue reported by
dlg@, fix by Alex Wilson on tech@, tweaks by me.
No reply from tech@
snmpd cannot reload

ok reyk@
Don't allow pasting into input-disabled panes, from Anish R Athalye.
Move sending of router solicitations to the kernel; receiving and
processing of router advertisements was already in the kernel.
With this rtsol{,d}(8) is no longer necessary.

The kernel starts sending solicitations with
# ifconfig $IF inet6 autoconf
or
inet6 autoconf
in /etc/hostname.$IF.

input stsp@
much help & OK mpi@
tweaks & OK bluhm@
We have never limited the definition of "supported SPF modules"
to the vendor/make whitelist maintained by Intel so there's no
reason to start doing it now.

When syncing the driver to the FreeBSD codebase I have decided
to take this chunk as is but it appears that it breaks cheap
chinese SFP+ fiber optics modules that we all love.  And while
there's still a lot of places where we check for the vendor
OUI, most of these checks are not necessary.

Issue reported and fix tested by Tony Sarendal.  Thanks!
Add a generic system-wide /usr/share/misc/mime.types file that can be
included in httpd.conf.  httpd(8) now supports both mime.types
flavours with or without semicolon at the end of the line (nginx- or
apache-style).

Discussed with many, with input from halex@
OK halex@
Simplify rm_from_pkg_scripts(); minus ten lines; no functional change;
ok ajacoutot@.

For non-trivial automated text editing in sh(1), thou shalt use sed(1).
Previosuly forgot the Makefile bit: add mime.types
Add support for DH groups 27-30 using the Brainpool curves which have
previously been added to LibreSSL's libcrypto.

ok markus@ mikeb@
Sync dh.[ch] from iked.  The files are identical, so any change in
either iked or isakmpd should be synced to the other daemon.  The
previous changes from iked include: plug two memory leaks, verify EC
points and add the Brainpool curves.  All tests in
regress/sbin/isakmpd/dh passed OKAY.

ok markus@ mikeb@
add an example vmx config line
ok dlg@
you broke the ramdisk builds...
Add tests for syslogd sending and receiving over IPv6 sockets.
Fix the gcc compiler warnings "comparison between signed and
unsigned".  Some checks got stricter.  The (size_t) cast is only
done, if the argument is not negative.
OK henning@
Allow to restrict syslogd to a protocol family with -4 and -6 command
line switches.  If the log server is an FQDN, DNS chooses wether
to take the IPv4 or IPv6 route.  Allow to prefix the log host with
udp4:// or udp6:// to choose a protocol.
OK henning@
Cope with some weird rc.conf.local file like "foobar" in pkg_scripts
while "foobar_flags" is set to "NO"...
Reparse deamon_flags at the end of add_flags() since they may have been
modified by the function.
For functions that take args, return immediately if no args is passed.
Add/drop missing/unused local variables.

no functionnal change
No more /etc/X11/fs
Inspired by the previous brainpool addition, copy isakmpd's dh test to
iked.  Both daemons share the same dh implementation, but this makes
it easier to test iked directly.
Add tests where the IP address family has been chosen by -4 or -6
command line switch and udp4:// or udp6:// loghost prefix.