Drop rh0 support (-g), it doesn't work anyway.
OK benno@
Replace fprintf(stderr, ..); exit() with errx() and fprintf(stderr, ...)
with warnx()
OK lteo@, benno@
Declare socklen_t len in main, it's used in two places, no need
to declare it twice. We can get rid of a { } block.
OK benno@
sync to traceroute6: use getnameinfo for destination ip
OK benno@
Move ident / perturb initialisation up, this is AF independent.
OK benno@
Wrap long lines.
OK lteo@, benno@
RAND_xxx considered harmful. use arc4random_buf instead of nasty stuff.
ok tedu@
Put back i2d_ASN1_SET() and d2i_ASN1_SET() from the NO_ASN1_OLD prune, as there
are still some 3rd-party code using it, and fixing them is not trivial.

As an excuse gift, the memory leaks on failure in resurrected a_set.c have
been fixed.
delete "string to make the random number generator think it has entropy"
another "string to make the random number generator think it has entropy"
another
Check the return value of make_config_name() before attempting to use
the config filename.

ok beck@
first round of static config. ok miod
Use the cleaned up asprintf-based make_config_name() to make the name of
the config file instead of the malloc/BUF_strlcpy/BUF_strlcat calls with
no return value checks (that make_config_name() also used to do prior to
being cleaned up).

ok beck@
It seems a generation of programmers is aping OpenSSL. We need re-education
camps.  RAND_ is considered hamful, we should not *re-implement* it here.
"fire bomb it" - tedu@, "dresdenizing" - beck@, "SSLaughterhouse five" miod@
typo
Not welcome
eroMgib dne- nai 68xtnetelca  .s
This remnant comment doesn't belong here.  ok claudio@
Remove the dead KAME code that dealt with IPv4-mapped IPv6 addresses.
Add a check for IPv4-mapped IPv6 destination addresses, like in the most
recent KAME code, for non-connected sockets.  This prevents packets from
reaching the wire through the default route, if a reject route
for ::ffff:0.0.0.0/96 isn't present.  ok claudio@