Limit the number of (Keep-Alive) requests per connection to 100.
(Same default as in nginx and Apache).
Fix an example, nat-to requires to specify the "out" direction in pf rules.

From "Vigdis" via misc@
can go in deraadt@
Fix an example: hostapd table entries have to be comma-separated.

From "Vigdis" via misc@
can go in deraadt@
Add srv_conf helper variable to make the code more readable.
No functional change.
Bring back the tcp/ip configuration options.  This code was already
there and is from relayd.  We can decide later which options should
be added or removed, but it shouldn't do any harm.
Tweak the httpd.conf manpage with "sub-lists".
Add configuration options for the most-important connection limits:
max requests (per connection) and timeout.  We don't want to add too
many button, and there are good defaults, but these ones are kind of
mandatory.
Only check if the abort transfer is the interrupt one if the pipe is
opened with a callback.

If a driver opens an interrupt pipe without callback function, like
umct(4) does with one of its bulk in endpoints being reported as an
interrupt endpoint, then we can end up aborting a transfer which is
different from the interrupt one.

Issue reported by Roberto E. Vargas Caballero, ok deraadt@
Add support for loading the public/private key from memory, rather than
directly from file.
Load the SSL public/private keys in the parent process, then provide them
to the privsep process via imsg. This allows the keys to be moved out of
the chroot (now /etc/ssl/server.crt, /etc/ssl/private/server.key).

ok reyk@
Explain the options in httpd.8

ok deraadt@
Add signify instructions plus miniroot and install56.fs for amd64/i386

ok deraadt@
Correct error checks in EVP_read_pw_string_min(): UI_add_input_string()
and UI_add_verify_string() return -1 (and maybe -2?) on failure and
>=0 on success, instead of always zero on success

problem reported by Mark Patruck (mark (at) wrapped.cx)
ok miod@
add missing va_start/va_end calls
ok deraadt@ guenther@
Add an overview of the features for httpd in the description section.

"commit" deraadt@
Add braces.  Style-only change.
Adjust the read/write watermarks according to the TCP send buffer.
This fixes sending of large files.  Previously, httpd was reading the
input file too quickly and could run out of memory when filling the
input buffer.

Found by jsg@
OK florian@
Bring back the last read (done) / last write (done) messages instead of just
"done" to simplify connection debugging.
The watermark exposed a bug in server_write that broke keep-alive
support.  Instead of calling server_close from server_write, we have
to proceed to the next connection by calling the error handler.

OK jsg@
avoid displaying a NULL pointer
ok deraadt@ reyk@