Check for SSL Cert value before building with SSL support.
Add HTTPD SSH assertion to check null cert/key.
Check empty stringfor globalRedirect. It breaks RedirectPermanent.
grsecurity: Fix build under new generic kernel derivation
grsecurity: Update stable and test patches

stable: 3.0-3.2.53-201312021727 -> 3.0-3.2.54-201401191012
test:   3.0-3.12.2-201312021733 -> 3.0-3.12.8-201401191015
Add libyubikey (aka yubico-c) package
Add ykpers (aka yubikey-personalization) package
Implement authentication for a LUKS device with a yubikey (HMAC-SHA1); supports simple challenge-response and two-factor authentication
Add #include <unisted.h> for sleep and usleep
haskellPackages.fay: New expression
haskellPackages.fayBase: New expression
haskellPackages.iCalendar: New expression
Added SublimeText3 support. SublimeText2 and SublimeText3 can be installed side by side.
They provide 'sublime', 'sublime2' and 'sublime3' commands. SublimeText3 has lower precedense than SublimeText2
because its in beta mode (for over a year now)
Merge pull request #1614 from ocharles/haskellPackages.iCalendar

haskellPackages.iCalendar: New expression
Merge pull request #1612 from ocharles/haskellPackages.fay

haskellPackages.fay: New expression
Merge pull request #1178 from chexxor/fix-httpd-ssh

HTTPD: Check for SSL Cert value before building with SSL support.
zfstools: Add new package

zfstools is an OpenSolaris-like and compatible auto snapshotting script
for ZFS, which also supports auto snapshotting mysql databases.
Add keepassx 2.0alpha5, contributed by Thomas Tuegel.
phantomjs: update to 1.9.7
Rewrite as a pre-boot authentication module (mostly) comforming to the design specification of
'YubiKey Integration for Full Disk Encryption Pre-Boot Authentication (Copyright) Yubico, 2011 Version: 1.1'.

Used binaries:
  * uuidgen - for generation of random sequence numbers
  * ykchalresp - for challenging a Yubikey
  * ykinfo - to check if a Yubikey is plugged in at boot (fallback to passphrase authentication otherwise)
  * openssl - for calculation of SHA-1, HMAC-SHA-1, as well as AES-256-CTR (de/en)cryption

Main differences to the specification mentioned above:
  * No user management (yet), only one password+yubikey per LUKS device
  * SHA-512 instead of CRC-16 for checksum

Main differences to the previous implementation:
  * Instead of changing the key slot of the LUKS device each boot,
    the actual key for the LUKS device will be encrypted itself
  * Since the response for the new challenge is now calculated
    locally with openssl, the MITM-USB-attack with which previously
    an attacker could obtain the new response (that was used as the new
    encryption key for the LUKS device) by listening to the
    Yubikey has ideally become useless (as long as uuidgen can
    successfuly generate new random sequence numbers).

Remarks:
  * This is not downwards compatible to the previous implementation