boot(9): Undo curproc-overriding hacks

Some (not all) boot(9) implementations have ancient hacks which overrides if
(curproc == NULL).  This was probably made in a hope to forcibly proceed
various clean-shutdown related code, including VFS shutdown.  Let's clarify
that clean-shutdown needs process context; it is impossible to cleanly shutdown
VFS from within e.g. a panic in SPL_HIGH.

OK kettenis@
Limit HTTP header length to about 8K (based on the default of 4-8K in
common web servers).  Add a related regress test.

OK benno@
Add OpenBSD RCS id.
As reported by David Ramos, most consumer of ssl_get_message() perform late
bounds check, after reading the 2-, 3- or 4-byte size of the next chunk to
process. But the size fields themselves are not checked for being entirely
contained in the buffer.

Since reading past your bounds is bad practice, and may not possible if you
are using a secure memory allocator, we need to add the necessary bounds check,
at the expense of some readability.

As a bonus, a wrong size GOST session key will now trigger an error instead of
a printf to stderr and it being handled as if it had the correct size.

Creating this diff made my eyes bleed (in the real sense); reviewing it
made guenther@'s and beck@'s eyes bleed too (in the literal sense).

ok guenther@ beck@
optimize a FALLTHROUGH
implicit ok reyk
Put a license file into the test directories with multiple argument
files.  We do not want to put a license header into each subtest.
suggested by reyk@
use CC when running configure
matches the behaviour of the other Makefile.bsd-wrapper files
ok miod@
sync
Test filtering by method

ok bluhm@ benno@
Initial version of libressl - a library that provides a clean, simple,
consistent and secure-by-default API for SSL clients (and soon servers).

This is a long way from complete and the interface will likely change
substantially - committing now so that further work can happen in the tree.

Initiated by tedu@ and inspired by discussions with tedu@, beck@ and
other developers.
indent as suggested by deraadt, no functional change
ok sthen@ deraadt@
fix the two links on the start page
document sendsyslog(2); ok guenther tedu matthew
sync
Preread the thermal zone trip points before reading the temperature value.
This is needed on some (specifically HP) machines to avoid _TMP reporting
a bogus temperature value (temperatures > 4,000 degC), which causes acpitz
to automatically shut down the machine because it thinks it's floating in
lava.

Also ensure that we can accept a temperature reading of 0 degC - we were
previously interpreting 0 degC as "bad temperature data" and not attaching
the thermal zone device. Some machines have ephemeral temperature sensors
that come and go (eg in docks) and we want to make sure we attach those
even if they report back 0 degC on initialization. Fixes some machines
with "failed to read _TMP" errors.

ok deraadt, tested and verified by a few folks on tech@ who were seeing
the thermal zone shutdown isue.
enough churn, a crank is advised by guenther..
odds are that some ABI change occured today, no matter how careful everyone
is
If a constant string needs a name, use a static const array instead
of a pointer or non-const array, as that minimizes the symbols,
maximizes the placement into read-only memory, and avoids warnings
from gcc -Wformat=2 when they're used as format strings.
Per C99, wchar.h has to forward declare struct tm
Welcome to 1989: assume the compiler support const