Fix rtsold(8) remote buffer overflow vulnerability. [SA-14:20]

Fix routed(8) remote denial of service vulnerability. [SA-14:21]

Fix memory leak in sandboxed namei lookup. [SA-14:22]

Fix OpenSSL multiple vulnerabilities. [SA-14:23]

Approved by:	so
Time zone data file update. [EN-14:10]

Change crypt(3) default hashing algorithm back to DES. [EN-14:11]

Approved by:	so
Untangle iSCSI authentication code by splitting off the CHAP
implementation.

Reviewed by:	mav@
MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 1bb0800b27fa08cfe8ed7bc8488ef14bdff2e2a8)
Whitespace fixes.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 853fc00c2a595397930af55fa5123c8e08aa36c0)

Conflicts:
	usr.bin/iscsictl/Makefile
Fix ctld(8) to not show the "auth-group <name> not assigned to any target"
warning for auth-groups assigned to a portal-group.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation
Remove misleading statement.  Bump date.

MFC after:	1 month
Sponsored by:	FreeBSD Foundation

(cherry picked from commit d7bc948e22b73d2b3d9f297bd9b268c230973d28)

Conflicts:
	usr.sbin/ctld/ctl.conf.5
Fix ctl.conf example to use proper paths to ZVOLs.

Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 79512487f6d9982d9dadddbb8ffc803c89194160)
Clean up (refactor) discovery a little; no functional changes.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit c0426e480a33dc0cee1e988653a3dd620f2a2f8d)
Merge remote-tracking branch 'freebsd/releng/9.3' into masters/releng/9.3
Tidy up the login code; no functional changes.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit e2e58f80cc8a6e6632b043d08a1cc05ef3ccdcd6)
Make the initiator-name and initiator-portal checks a little nicer.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit 904ee8f9378b694958e470ffc7d0ae7fc8ad8f95)
Improve ctld.conf example.

MFC after:	1 month
Sponsored by:	The FreeBSD Foundation

(cherry picked from commit cbbca2de4dfaf610c857bebc91cd6029026797ad)
Add basic iSNS client to the iSCSI target.

This makes ctld(8) register its iSCSI targets and portals on configured
iSNS servers to allow initiators find them without active discovery.

Fetching of allowed initiators from iSNS is not implemented now, so target
ACLs still should be configured manually.

Reviewed by:	trasz@
MFC after:	1 month
Sponsored by:	iXsystems, Inc.
Ticket:		#6368

(cherry picked from commit b91222fa4fd4a5dab2de697378099454a393c295)

Conflicts:
	usr.sbin/ctld/ctl.conf.5