Oracle has re-licensed sunrpc under a three-clause BSD license.
Update our sources appropriately.  OK deraadt@ jsg@
Use mandoc instead of groff to build PostScript manuals; note that
these are not built by default, but only built when MANPS is set.
kristaps@ and jmc@ agree with the idea,
and the patch doesn't bother deraadt@ at all
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
import OpenSSL-1.0.0a
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
import OpenSSL-1.0.0a
resolve conflicts, fix local changes
add missing; yay for cvs!
update supporting files, crank library majors
fix -Wall due to API change
percolate up errors from perl asm scripts, correctly enable SHA-256 asm on
amd64
DES_LONG should be u_int on all platforms, it was spuriously
u_long on i386. suggested by deraadt@ and kettenis@
Our make already uses sh -e when executing commands.
Revert the "set -e" additions and kill unneeded subshells.  ok djm@
Retire Skipjack

There's not much use for the declassified cipher from the 80's
with a questionable license these days.  According to the FIPS
drafts, Skipjack reaches its EOL in December 2010.

The libc portion will be removed after the ports hackathon.

djm and thib agree, no objections from deraadt
Thanks to jsg for digging up FIPS drafts.
More OpenSSL fixes:

- Update local engines for the EVP API change (len u_int => size_t)
- Use hw_cryptodev.c instead of eng_cryptodev.c
- Make x86_64-xlate.pl always write to the output file and not stdout,
  fixing "make -j" builds (spotted by naddy@)

ok naddy@
OpenSSL grows another undocumented header, apparently needed on armish
Disable use of dladdr() on a.out arches, they do not provide it (yet); ok djm@
- Apply security fix for CVE-2010-3864 (+commit 19998 which fixes the fix).

ok djm@ deraadt@
Security fix for CVE-2010-4180 as mentioned in http://www.openssl.org/news/secadv_20101202.txt.
where clients could modify the stored session
cache ciphersuite and in some cases even downgrade the suite to weaker ones.

This code is not enabled by default.

ok djm@
The VIA ciphers are added to an array of CRYPTO_ALGORITHM_MAX length
which should have been declared as CRYPTO_ALGORITHM_MAX + 1,
fix this and reserve enough space for the VIA additions as well.

ok/comments from mikeb & deraadt