Rewrite i2d_SSL_SESSION to use the ASN1 primitives, rather than using the
horrific macros from asn1_mac.h.

This is a classic example of using macros to obfuscate code, in an attempt
to reduce the line count. The end result is so ridiculously convoluted that
it is completely unreadable and it takes hours to deconstruct the macros
and figure out what is actually going on behind the scenes.

ok miod@
Expand the tlsext_sigalg macros. The end result is about the same number
of lines and much more readable.

ok miod@
Another compression remnant.
Introduce PS_NOBROADCASTKILL a process flag that excludes processes from
receiving broadcast signals (kill -1). The flag can be set via a new
sysctl KERN_PROC_NOBROADCASTKILL. This will be used by iscsid to survive
the mass killing by init(8) when terminating multi-user operations.
With and OK guenther@
When the three possible return values are -1, 0, and 1, != 1 is the same
as <= 0. And the latter is the normal idiom so use that.

ok claudio@ henning@
Remove license introduced with the PSK code, which has since been removed.

ok deraadt@
kill fs2hXX/h2fsXX macros with letohXX/htoleXX

The reason being that ext2 structures are little-endian but JBD2 journal
is big-endian.  Don't confuse readers by talking about "file system endian".

While here, nuke the copy of bswap.c and link it against the kernel's like
fsck_ext2fs has done, for better maintainability.

ok guenther
Add iscsid_flags to rc.conf so we do not try to start iscsid all the time.
Noticed by naddy@
GPTSIGNATURE must be LL, for operation on non-punk machines
ok punk
Put back a m_copyback() that got lost in rev 1.837 of pf.c.  This
fixes the rewrite of an IPv6 header of an ICMP6 packet in the payload
of an ICMP6 error packet.  Path MTU discovery with ping6 over pf
nat or rdr works again.
Found by src/regress/sys/net/pf_fragment make run-regress-fragping6
OK henning@
kill fs2hXX/h2fsXX macros with letohXX/htoleXX

The reason being that ext2 structures are little-endian but JBD2 journal
is big-endian.  Don't confuse readers by talking about "file system endian".

Some KNF while there.

ok guenther
sync
Set KERN_PROC_NOBROADCASTKILL so that iscsid is not killed by init
when terminating multi-user so that we have a chance to sync the
file systems mounted via iscsi.
bundling base + packages was slow, as it needed to find lots of files.
different approach: mark the base system in one go, then hand pick the
files from the pkglocatedb.

quite a few unaccounted files yet, this will get better
Keep track of port connections and port resets.

Also notify upstream when a port finished reseting and when the
connection status changes.

Gets things further along to the point where pipe device transfer
and control methods are required.
bye bye src url. Never amounted to much, we went another road a while ago
-N for SYNOPSIS and usage(), and some small changes to previous;
use mallocarray where arguments are multiplied; ok tedu
do not need malloc.h
tweak previous;