Prepare scripts for next Cygwin release

Makes the Cygwin-specific ssh-user-config script independent of the
existence of /etc/passwd.  The next Cygwin release will allow to
generate passwd and group entries from the Windows account DBs, so the
scripts have to adapt.

from Corinna Vinschen
upstream commit

mux-related manual tweaks

mention ControlPersist=0 is the same as ControlPersist=yes

recommend that ControlPath sockets be placed in a og-w directory
upstream commit

Reduce instances of `` '' in manuals.

troff displays these as typographic quotes, but nroff implementations
almost always print them literally, which rarely has the intended effect
with modern fonts, even in stock xterm.

These uses of `` '' can be replaced either with more semantic alternatives
or with Dq, which prints typographic quotes in a UTF-8 locale (but will
automatically fall back to `` '' in an ASCII locale).

improvements and ok schwarze@
upstream commit

fix KRL generation when multiple CAs are in use

We would generate an invalid KRL when revoking certs by serial
number for multiple CA keys due to a section being written out
twice.

Also extend the regress test to catch this case by having it
produce a multi-CA KRL.

Reported by peter AT pean.org
upstream commit

fix NULL pointer dereference crash in key loading

found by Michal Zalewski's AFL fuzzer
upstream commit

fix KRL generation when multiple CAs are in use

We would generate an invalid KRL when revoking certs by serial
number for multiple CA keys due to a section being written out
twice.

Also extend the regress test to catch this case by having it
produce a multi-CA KRL.

Reported by peter AT pean.org
upstream commit

Nuke more obvious #include duplications.

ok deraadt@ millert@ tedu@
upstream commit

Sync AES code to the one shipped in OpenSSL/LibreSSL.

This includes a commit made by Andy Polyakov <appro at openssl ! org>
to the OpenSSL source tree on Wed, 28 Jun 2006 with the following
message: "Mitigate cache-collision timing attack on last round."

OK naddy, miod, djm
upstream commit

fix NULL pointer dereference crash on invalid timestamp

found using Michal Zalewski's afl fuzzer
upstream commit

/dev/random has created the same effect as /dev/arandom
 (and /dev/urandom) for quite some time.  Mop up the last few, by using
 /dev/random where we actually want it, or not even mentioning arandom where
 it is irrelevant.
upstream commit

restore word zapped in previous, and remove some useless
 "No" macros;
allow custom service name for sshd on Cygwin

Permits the use of multiple sshd running with different service names.

Patch by Florian Friesdorf via Corinna Vinschen
Avoid Cygwin ssh-host-config reading /etc/group

Patch from Corinna Vinschen
upstream commit

Fix crashes in the handling of the sshd config file found
 with the afl fuzzer.

ok deraadt@ djm@
upstream commit

Prefer setvbuf() to setlinebuf() for portability; ok
 deraadt@
upstream commit

convert KRL code to new buffer API

ok markus@
upstream commit

add RevokedHostKeys option for the client

Allow textfile or KRL-based revocation of hostkeys.
upstream commit

key_in_file() wrapper is no longer used
upstream commit

Nuke yet more obvious #include duplications.

ok deraadt@
upstream commit

add tests for new client RevokedHostKeys option; refactor
 to make it a bit more readable