OpenBSD src changes summary for 2016-09-02
==========================================

distrib/amd64                           distrib/miniroot
distrib/notes                           distrib/special
etc/MAKEDEV.common                      etc/etc.alpha/MAKEDEV
etc/etc.alpha/MAKEDEV.md                etc/etc.amd64/MAKEDEV
etc/etc.amd64/MAKEDEV.md                etc/etc.armv7/MAKEDEV
etc/etc.armv7/MAKEDEV.md                etc/etc.hppa/MAKEDEV
etc/etc.hppa/MAKEDEV.md                 etc/etc.i386/MAKEDEV
etc/etc.i386/MAKEDEV.md                 etc/etc.landisk/MAKEDEV
etc/etc.landisk/MAKEDEV.md              etc/etc.loongson/MAKEDEV
etc/etc.loongson/MAKEDEV.md             etc/etc.luna88k/MAKEDEV
etc/etc.luna88k/MAKEDEV.md              etc/etc.macppc/MAKEDEV
etc/etc.macppc/MAKEDEV.md               etc/etc.octeon/MAKEDEV
etc/etc.octeon/MAKEDEV.md               etc/etc.sgi/MAKEDEV
etc/etc.sgi/MAKEDEV.md                  etc/etc.socppc/MAKEDEV
etc/etc.socppc/MAKEDEV.md               etc/etc.sparc64/MAKEDEV
etc/etc.sparc64/MAKEDEV.md              etc/etc.zaurus/MAKEDEV
etc/etc.zaurus/MAKEDEV.md               etc/examples/pkg.conf
etc/root/root.mail                      games/fortune
gnu/usr.bin/texinfo                     lib/libc
lib/libcrypto                           lib/libssl
libexec/login_passwd                    regress/gnu
regress/lib                             regress/sbin
regress/sys                             regress/usr.bin
regress/usr.sbin                        sbin/dhclient
sbin/disklabel                          sbin/ifconfig
sbin/isakmpd                            sbin/ping
sbin/ping6                              sbin/sysctl
share/man                               share/snmp
sys/arch/alpha/alpha                    sys/arch/amd64/amd64
sys/arch/arm/arm                        sys/arch/hppa/hppa
sys/arch/i386/i386                      sys/arch/landisk/landisk
sys/arch/loongson/loongson              sys/arch/luna88k/luna88k
sys/arch/macppc/macppc                  sys/arch/octeon/octeon
sys/arch/sgi/sgi                        sys/arch/socppc/socppc
sys/arch/sparc64/sparc64                sys/crypto
sys/ddb                                 sys/dev/acpi
sys/dev/ic                              sys/dev/pci
sys/dev/usb                             sys/isofs/cd9660
sys/kern                                sys/net
sys/netinet                             sys/netinet6
sys/sys                                 sys/uvm
usr.bin/doas                            usr.bin/encrypt
usr.bin/jot                             usr.bin/mandoc
usr.bin/netstat                         usr.bin/openssl
usr.bin/passwd                          usr.bin/patch
usr.bin/signify                         usr.bin/tmux
usr.bin/vi                              usr.sbin/bgpd
usr.sbin/dvmrpctl                       usr.sbin/dvmrpd
usr.sbin/eigrpctl                       usr.sbin/eigrpd
usr.sbin/httpd                          usr.sbin/ifstated
usr.sbin/iscsid                         usr.sbin/ldpd
usr.sbin/ospf6ctl                       usr.sbin/ospf6d
usr.sbin/ospfctl                        usr.sbin/ospfd
usr.sbin/relayd                         usr.sbin/ripctl
usr.sbin/ripd                           usr.sbin/smtpd
usr.sbin/snmpd                          usr.sbin/sysmerge
usr.sbin/tcpdump                        usr.sbin/vmd

== distrib =========================================================== 01/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/distrib

amd64

  ~ common/install.md                     

  > Fix misleading 'No valid MBR or GPT' message when no OpenBSD area is found.
  > The current code is too strict and checks for an OpenBSD area inside an
  > MBR or GPT and if it fails to find one reports that there's no valid MBR
  > or GPT (which is misleading because the MBR/GPT is valid).
  > Instead, do two checks (similar to i386): first see if there's an MBR or
  > GPT
  > present on the disk and if there is then check for the OpenBSD area.
  > OK krw@, halex@. (pirofti@)

miniroot

  ~ install.sub                           

  > for an upgrade disk selection, present a default alternative of 'auto',
  > which will scan the available disks, selecting the first disk with an
  > 'a' partition of type 4.2BSD
  > ok deraadt@ krw@ phessler@ (halex@)

notes

  ~ INSTALL                               ~ mirrors
  ~ packages                              ~ amd64/hardware
  ~ i386/hardware                         ~ landisk/prep

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

special

  ~ Makefile.inc                          

  > backout accidental commit (deraadt@)

== etc =============================================================== 02/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/etc

MAKEDEV.common

  ~ MAKEDEV.common                        

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.alpha/MAKEDEV

  ~ etc.alpha/MAKEDEV                     

  > sync (goda@)

etc.alpha/MAKEDEV.md

  ~ etc.alpha/MAKEDEV.md                  

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.amd64/MAKEDEV

  ~ etc.amd64/MAKEDEV                     

  > sync (goda@)

etc.amd64/MAKEDEV.md

  ~ etc.amd64/MAKEDEV.md                  

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.armv7/MAKEDEV

  ~ etc.armv7/MAKEDEV                     

  > sync (goda@)

etc.armv7/MAKEDEV.md

  ~ etc.armv7/MAKEDEV.md                  

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.hppa/MAKEDEV

  ~ etc.hppa/MAKEDEV                      

  > sync (goda@)

etc.hppa/MAKEDEV.md

  ~ etc.hppa/MAKEDEV.md                   

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.i386/MAKEDEV

  ~ etc.i386/MAKEDEV                      

  > sync (goda@)

etc.i386/MAKEDEV.md

  ~ etc.i386/MAKEDEV.md                   

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.landisk/MAKEDEV

  ~ etc.landisk/MAKEDEV                   

  > sync (goda@)

etc.landisk/MAKEDEV.md

  ~ etc.landisk/MAKEDEV.md                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.loongson/MAKEDEV

  ~ etc.loongson/MAKEDEV                  

  > sync (goda@)

etc.loongson/MAKEDEV.md

  ~ etc.loongson/MAKEDEV.md               

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.luna88k/MAKEDEV

  ~ etc.luna88k/MAKEDEV                   

  > sync (goda@)

etc.luna88k/MAKEDEV.md

  ~ etc.luna88k/MAKEDEV.md                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.macppc/MAKEDEV

  ~ etc.macppc/MAKEDEV                    

  > sync (goda@)

etc.macppc/MAKEDEV.md

  ~ etc.macppc/MAKEDEV.md                 

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.octeon/MAKEDEV

  ~ etc.octeon/MAKEDEV                    

  > sync (goda@)

etc.octeon/MAKEDEV.md

  ~ etc.octeon/MAKEDEV.md                 

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.sgi/MAKEDEV

  ~ etc.sgi/MAKEDEV                       

  > sync (goda@)

etc.sgi/MAKEDEV.md

  ~ etc.sgi/MAKEDEV.md                    

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.socppc/MAKEDEV

  ~ etc.socppc/MAKEDEV                    

  > sync (goda@)

etc.socppc/MAKEDEV.md

  ~ etc.socppc/MAKEDEV.md                 

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.sparc64/MAKEDEV

  ~ etc.sparc64/MAKEDEV                   

  > sync (goda@)

etc.sparc64/MAKEDEV.md

  ~ etc.sparc64/MAKEDEV.md                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

etc.zaurus/MAKEDEV

  ~ etc.zaurus/MAKEDEV                    

  > sync (goda@)

etc.zaurus/MAKEDEV.md

  ~ etc.zaurus/MAKEDEV.md                 

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

examples/pkg.conf

  ~ examples/pkg.conf                     

  > sync (sthen@)

root/root.mail

  ~ root/root.mail                        

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

== games ============================================================= 03/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/games

fortune

  ~ datfiles/Makefile                     

  > Make build deterministic by not randomizing the datfiles themselves,
  > random lines are selected on output and that's enough.
  > From daniel, ok tb (tb@)

== gnu =============================================================== 04/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/gnu

usr.bin/texinfo

  ~ util/gen-dir-node                     

  > Make build deterministic by removing a line that records the date of
  > generation. From daniel, ok tb (tb@)

== lib =============================================================== 05/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/lib

libc

  ~ locale/setrunelocale.c                

  > Since we support only one non-ASCII LC_CTYPE locale, we don't need
  > a linked list to store it.  No functional change.
  > OK mpi@ guenther@,
  > and stsp@ agrees too that the time is ripe to start such cleanup
  > (schwarze@)

  ~ locale/wcwidth.3                      

  > Make it clear that printable characters of width 0 exist.
  > While here, polish some wording.
  > OK stsp@ (schwarze@)

  ~ thread/callbacks.c                    

  > fix format string
  > ok guenther@ (chl@)

libcrypto

  ~ crypto/getentropy_osx.c               

  > add iOS support for getentropy
  > from jacob berkman (bcook@)

  - crypto/Makefile                       - crypto/arc4random_aix.h
  - crypto/arc4random_freebsd.h           - crypto/arc4random_hpux.h
  - crypto/arc4random_linux.h             - crypto/arc4random_netbsd.h
  - crypto/arc4random_osx.h               - crypto/arc4random_solaris.h
  - crypto/arc4random_win.h               - crypto/getentropy_aix.c
  - crypto/getentropy_freebsd.c           - crypto/getentropy_hpux.c
  - crypto/getentropy_linux.c             - crypto/getentropy_netbsd.c
  - crypto/getentropy_osx.c               - crypto/getentropy_solaris.c
  - crypto/getentropy_win.c               - crypto/shlib_version
  - crypto/arch/alpha/Makefile.inc        - crypto/arch/alpha/opensslconf.h
  - crypto/arch/amd64/Makefile.inc        - crypto/arch/amd64/opensslconf.h
  - crypto/arch/arm/Makefile.inc          - crypto/arch/arm/opensslconf.h
  - crypto/arch/hppa/Makefile.inc         - crypto/arch/hppa/opensslconf.h
  - crypto/arch/i386/Makefile.inc         - crypto/arch/i386/opensslconf.h
  - crypto/arch/m88k/opensslconf.h        - crypto/arch/mips64/Makefile.inc
  - crypto/arch/mips64/opensslconf.h      - crypto/arch/powerpc/Makefile.inc
  - crypto/arch/powerpc/opensslconf.h     - crypto/arch/sh/opensslconf.h
  - crypto/arch/sparc64/Makefile.inc      - crypto/arch/sparc64/opensslconf.h
  - crypto/arch/vax/Makefile.inc          - crypto/arch/vax/bn_asm_vax.S
  - crypto/arch/vax/opensslconf.h         

  > Remove the libcrypto/crypto directory (beck@)

  ~ Makefile                              ~ generate_pkgconfig.sh
  ~ man/Makefile                          

  > Fix Makefile for file location moves (beck@)

  ~ Makefile                              

  > LIB=crypto, kind of neccessary (deraadt@)

libssl

  - src/doc/apps/asn1parse.pod            - src/doc/apps/ca.pod
  - src/doc/apps/ciphers.pod              - src/doc/apps/cms.pod
  - src/doc/apps/config.pod               - src/doc/apps/crl.pod
  - src/doc/apps/crl2pkcs7.pod            - src/doc/apps/dgst.pod
  - src/doc/apps/dhparam.pod              - src/doc/apps/dsa.pod
  - src/doc/apps/dsaparam.pod             - src/doc/apps/ec.pod
  - src/doc/apps/ecparam.pod              - src/doc/apps/enc.pod
  - src/doc/apps/errstr.pod               - src/doc/apps/gendsa.pod
  - src/doc/apps/genpkey.pod              - src/doc/apps/genrsa.pod
  - src/doc/apps/nseq.pod                 - src/doc/apps/ocsp.pod
  - src/doc/apps/openssl.pod              - src/doc/apps/passwd.pod
  - src/doc/apps/pkcs12.pod               - src/doc/apps/pkcs7.pod
  - src/doc/apps/pkcs8.pod                - src/doc/apps/pkey.pod
  - src/doc/apps/pkeyparam.pod            - src/doc/apps/pkeyutl.pod
  - src/doc/apps/rand.pod                 - src/doc/apps/req.pod
  - src/doc/apps/rsa.pod                  - src/doc/apps/rsautl.pod
  - src/doc/apps/s_client.pod             - src/doc/apps/s_server.pod
  - src/doc/apps/s_time.pod               - src/doc/apps/sess_id.pod
  - src/doc/apps/smime.pod                - src/doc/apps/speed.pod
  - src/doc/apps/spkac.pod                - src/doc/apps/ts.pod
  - src/doc/apps/verify.pod               - src/doc/apps/version.pod
  - src/doc/apps/x509.pod                 - src/doc/apps/x509v3_config.pod

  > Remove old pod docs that are not used or installed (beck@)

  ~ src/crypto/bn/bn_exp.c                

  > BN_mod_exp_mont_consttime: check for zero modulus.
  > Don't dereference d when top is zero.
  > Original patch from OpenSSL commit d46e946d2603c64df6e1e4f9db0c70baaf1c4c03
  > ok jsing@ (bcook@)

  ~ src/crypto/rsa/rsa_eay.c              

  > missing space after comma
  > ok bcook (tb@)

  ~ src/crypto/evp/evp_enc.c              ~ src/doc/crypto/EVP_EncryptInit.pod

  > warn on use of deprecated EVP functions
  > This adds a linker warning for EVP_EncryptFinal(), EVP_DecryptFinal(),
  > EVP_CipherFinal(), and documents the recent behavior updates.
  > ok beck@ (bcook@)

  - ssl/Makefile                          - ssl/shlib_version

  > Remove the libssl/ssl directory (beck@)

  - src/LICENSE                           - src/apps/openssl.cnf
  - src/crypto/alphacpuid.pl              - src/crypto/arm_arch.h
  - src/crypto/armcap.c                   - src/crypto/armv4cpuid.S
  - src/crypto/constant_time_locl.h       - src/crypto/cpt_err.c
  - src/crypto/cryptlib.c                 - src/crypto/cryptlib.h
  - src/crypto/crypto.h                   - src/crypto/cversion.c
  - src/crypto/ex_data.c                  - src/crypto/ia64cpuid.S
  - src/crypto/malloc-wrapper.c           - src/crypto/md32_common.h
  - src/crypto/mem_clr.c                  - src/crypto/mem_dbg.c
  - src/crypto/o_init.c                   - src/crypto/o_str.c
  - src/crypto/o_time.c                   - src/crypto/o_time.h
  - src/crypto/opensslfeatures.h          - src/crypto/opensslv.h
  - src/crypto/ossl_typ.h                 - src/crypto/pariscid.pl
  - src/crypto/ppccap.c                   - src/crypto/ppccpuid.pl
  - src/crypto/s390xcap.c                 - src/crypto/s390xcpuid.S
  - src/crypto/sparccpuid.S               - src/crypto/sparcv9cap.c
  - src/crypto/x86_64cpuid.pl             - src/crypto/x86cpuid.pl
  - src/crypto/aes/README                 - src/crypto/aes/aes.h
  - src/crypto/aes/aes_cbc.c              - src/crypto/aes/aes_cfb.c
  - src/crypto/aes/aes_core.c             - src/crypto/aes/aes_ctr.c
  - src/crypto/aes/aes_ecb.c              - src/crypto/aes/aes_ige.c
  - src/crypto/aes/aes_locl.h             - src/crypto/aes/aes_misc.c
  - src/crypto/aes/aes_ofb.c              - src/crypto/aes/aes_wrap.c
  - src/crypto/aes/aes_x86core.c          - src/crypto/aes/asm/aes-586.pl
  - src/crypto/aes/asm/aes-armv4.pl       - src/crypto/aes/asm/aes-ia64.S
  - src/crypto/aes/asm/aes-mips.pl        - src/crypto/aes/asm/aes-parisc.pl
  - src/crypto/aes/asm/aes-ppc.pl         - src/crypto/aes/asm/aes-s390x.pl
  - src/crypto/aes/asm/aes-sparcv9.pl     - src/crypto/aes/asm/aes-x86_64.pl
  - src/crypto/aes/asm/aesni-sha1-x86_64.pl
  - src/crypto/aes/asm/aesni-x86.pl       - src/crypto/aes/asm/aesni-x86_64.pl
  - src/crypto/aes/asm/bsaes-x86_64.pl    - src/crypto/aes/asm/vpaes-x86.pl
  - src/crypto/aes/asm/vpaes-x86_64.pl    - src/crypto/asn1/a_bitstr.c
  - src/crypto/asn1/a_bool.c              - src/crypto/asn1/a_bytes.c
  - src/crypto/asn1/a_d2i_fp.c            - src/crypto/asn1/a_digest.c
  - src/crypto/asn1/a_dup.c               - src/crypto/asn1/a_enum.c
  - src/crypto/asn1/a_i2d_fp.c            - src/crypto/asn1/a_int.c
  - src/crypto/asn1/a_mbstr.c             - src/crypto/asn1/a_object.c
  - src/crypto/asn1/a_octet.c             - src/crypto/asn1/a_print.c
  - src/crypto/asn1/a_set.c               - src/crypto/asn1/a_sign.c
  - src/crypto/asn1/a_strex.c             - src/crypto/asn1/a_strnid.c
  - src/crypto/asn1/a_time.c              - src/crypto/asn1/a_time_tm.c
  - src/crypto/asn1/a_type.c              - src/crypto/asn1/a_utf8.c
  - src/crypto/asn1/a_verify.c            - src/crypto/asn1/ameth_lib.c
  - src/crypto/asn1/asn1.h                - src/crypto/asn1/asn1_err.c
  - src/crypto/asn1/asn1_gen.c            - src/crypto/asn1/asn1_lib.c
  - src/crypto/asn1/asn1_locl.h           - src/crypto/asn1/asn1_mac.h
  - src/crypto/asn1/asn1_par.c            - src/crypto/asn1/asn1t.h
  - src/crypto/asn1/asn_mime.c            - src/crypto/asn1/asn_moid.c
  - src/crypto/asn1/asn_pack.c            - src/crypto/asn1/bio_asn1.c
  - src/crypto/asn1/bio_ndef.c            - src/crypto/asn1/charmap.h
  - src/crypto/asn1/charmap.pl            - src/crypto/asn1/d2i_pr.c
  - src/crypto/asn1/d2i_pu.c              - src/crypto/asn1/evp_asn1.c
  - src/crypto/asn1/f_enum.c              - src/crypto/asn1/f_int.c
  - src/crypto/asn1/f_string.c            - src/crypto/asn1/i2d_pr.c
  - src/crypto/asn1/i2d_pu.c              - src/crypto/asn1/n_pkey.c
  - src/crypto/asn1/nsseq.c               - src/crypto/asn1/p5_pbe.c
  - src/crypto/asn1/p5_pbev2.c            - src/crypto/asn1/p8_pkey.c
  - src/crypto/asn1/t_bitst.c             - src/crypto/asn1/t_crl.c
  - src/crypto/asn1/t_pkey.c              - src/crypto/asn1/t_req.c
  - src/crypto/asn1/t_spki.c              - src/crypto/asn1/t_x509.c
  - src/crypto/asn1/t_x509a.c             - src/crypto/asn1/tasn_dec.c
  - src/crypto/asn1/tasn_enc.c            - src/crypto/asn1/tasn_fre.c
  - src/crypto/asn1/tasn_new.c            - src/crypto/asn1/tasn_prn.c
  - src/crypto/asn1/tasn_typ.c            - src/crypto/asn1/tasn_utl.c
  - src/crypto/asn1/x_algor.c             - src/crypto/asn1/x_attrib.c
  - src/crypto/asn1/x_bignum.c            - src/crypto/asn1/x_crl.c
  - src/crypto/asn1/x_exten.c             - src/crypto/asn1/x_info.c
  - src/crypto/asn1/x_long.c              - src/crypto/asn1/x_name.c
  - src/crypto/asn1/x_nx509.c             - src/crypto/asn1/x_pkey.c
  - src/crypto/asn1/x_pubkey.c            - src/crypto/asn1/x_req.c
  - src/crypto/asn1/x_sig.c               - src/crypto/asn1/x_spki.c
  - src/crypto/asn1/x_val.c               - src/crypto/asn1/x_x509.c
  - src/crypto/asn1/x_x509a.c             - src/crypto/bf/COPYRIGHT
  - src/crypto/bf/INSTALL                 - src/crypto/bf/README
  - src/crypto/bf/VERSION                 - src/crypto/bf/bf_cbc.c
  - src/crypto/bf/bf_cfb64.c              - src/crypto/bf/bf_ecb.c
  - src/crypto/bf/bf_enc.c                - src/crypto/bf/bf_locl.h
  - src/crypto/bf/bf_ofb64.c              - src/crypto/bf/bf_pi.h
  - src/crypto/bf/bf_skey.c               - src/crypto/bf/blowfish.h
  - src/crypto/bf/asm/bf-586.pl           - src/crypto/bio/b_dump.c
  - src/crypto/bio/b_posix.c              - src/crypto/bio/b_print.c
  - src/crypto/bio/b_sock.c               - src/crypto/bio/bf_buff.c
  - src/crypto/bio/bf_lbuf.c              - src/crypto/bio/bf_nbio.c
  - src/crypto/bio/bf_null.c              - src/crypto/bio/bio.h
  - src/crypto/bio/bio_cb.c               - src/crypto/bio/bio_err.c
  - src/crypto/bio/bio_lib.c              - src/crypto/bio/bss_acpt.c
  - src/crypto/bio/bss_bio.c              - src/crypto/bio/bss_conn.c
  - src/crypto/bio/bss_dgram.c            - src/crypto/bio/bss_fd.c
  - src/crypto/bio/bss_file.c             - src/crypto/bio/bss_log.c
  - src/crypto/bio/bss_mem.c              - src/crypto/bio/bss_null.c
  - src/crypto/bio/bss_sock.c             - src/crypto/bn/bn.h
  - src/crypto/bn/bn_add.c                - src/crypto/bn/bn_asm.c
  - src/crypto/bn/bn_blind.c              - src/crypto/bn/bn_const.c
  - src/crypto/bn/bn_ctx.c                - src/crypto/bn/bn_depr.c
  - src/crypto/bn/bn_div.c                - src/crypto/bn/bn_err.c
  - src/crypto/bn/bn_exp.c                - src/crypto/bn/bn_exp2.c
  - src/crypto/bn/bn_gcd.c                - src/crypto/bn/bn_gf2m.c
  - src/crypto/bn/bn_kron.c               - src/crypto/bn/bn_lcl.h
  - src/crypto/bn/bn_lib.c                - src/crypto/bn/bn_mod.c
  - src/crypto/bn/bn_mont.c               - src/crypto/bn/bn_mpi.c
  - src/crypto/bn/bn_mul.c                - src/crypto/bn/bn_nist.c
  - src/crypto/bn/bn_prime.c              - src/crypto/bn/bn_prime.h
  - src/crypto/bn/bn_prime.pl             - src/crypto/bn/bn_print.c
  - src/crypto/bn/bn_rand.c               - src/crypto/bn/bn_recp.c
  - src/crypto/bn/bn_shift.c              - src/crypto/bn/bn_sqr.c
  - src/crypto/bn/bn_sqrt.c               - src/crypto/bn/bn_word.c
  - src/crypto/bn/bn_x931p.c              - src/crypto/bn/asm/alpha-mont.pl
  - src/crypto/bn/asm/armv4-gf2m.pl       - src/crypto/bn/asm/armv4-mont.pl
  - src/crypto/bn/asm/bn-586.pl           - src/crypto/bn/asm/co-586.pl
  - src/crypto/bn/asm/ia64-mont.pl        - src/crypto/bn/asm/ia64.S
  - src/crypto/bn/asm/mips-mont.pl        - src/crypto/bn/asm/mips.pl
  - src/crypto/bn/asm/modexp512-x86_64.pl
  - src/crypto/bn/asm/pa-risc2.s          - src/crypto/bn/asm/pa-risc2W.s
  - src/crypto/bn/asm/parisc-mont.pl      - src/crypto/bn/asm/ppc-mont.pl
  - src/crypto/bn/asm/ppc.pl              - src/crypto/bn/asm/ppc64-mont.pl
  - src/crypto/bn/asm/s390x-gf2m.pl       - src/crypto/bn/asm/s390x-mont.pl
  - src/crypto/bn/asm/s390x.S             - src/crypto/bn/asm/sparcv8.S
  - src/crypto/bn/asm/sparcv8plus.S       - src/crypto/bn/asm/sparcv9-mont.pl
  - src/crypto/bn/asm/sparcv9a-mont.pl    - src/crypto/bn/asm/via-mont.pl
  - src/crypto/bn/asm/x86-gf2m.pl         - src/crypto/bn/asm/x86-mont.pl
  - src/crypto/bn/asm/x86.pl              - src/crypto/bn/asm/x86_64-gcc.c
  - src/crypto/bn/asm/x86_64-gf2m.pl      - src/crypto/bn/asm/x86_64-mont.pl
  - src/crypto/bn/asm/x86_64-mont5.pl     - src/crypto/bn/asm/x86/add.pl
  - src/crypto/bn/asm/x86/comba.pl        - src/crypto/bn/asm/x86/div.pl
  - src/crypto/bn/asm/x86/mul.pl          - src/crypto/bn/asm/x86/mul_add.pl
  - src/crypto/bn/asm/x86/sqr.pl          - src/crypto/bn/asm/x86/sub.pl
  - src/crypto/buffer/buf_err.c           - src/crypto/buffer/buf_str.c
  - src/crypto/buffer/buffer.c            - src/crypto/buffer/buffer.h
  - src/crypto/camellia/camellia.c        - src/crypto/camellia/camellia.h
  - src/crypto/camellia/cmll_cbc.c        - src/crypto/camellia/cmll_cfb.c
  - src/crypto/camellia/cmll_ctr.c        - src/crypto/camellia/cmll_ecb.c
  - src/crypto/camellia/cmll_locl.h       - src/crypto/camellia/cmll_misc.c
  - src/crypto/camellia/cmll_ofb.c        - src/crypto/camellia/asm/cmll-x86.pl
  - src/crypto/camellia/asm/cmll-x86_64.pl
  - src/crypto/cast/c_cfb64.c             - src/crypto/cast/c_ecb.c
  - src/crypto/cast/c_enc.c               - src/crypto/cast/c_ofb64.c
  - src/crypto/cast/c_skey.c              - src/crypto/cast/cast.h
  - src/crypto/cast/cast_lcl.h            - src/crypto/cast/cast_s.h
  - src/crypto/cast/asm/cast-586.pl       - src/crypto/chacha/chacha-merged.c
  - src/crypto/chacha/chacha.c            - src/crypto/chacha/chacha.h
  - src/crypto/cmac/cm_ameth.c            - src/crypto/cmac/cm_pmeth.c
  - src/crypto/cmac/cmac.c                - src/crypto/cmac/cmac.h
  - src/crypto/cms/cms.h                  - src/crypto/cms/cms_asn1.c
  - src/crypto/cms/cms_att.c              - src/crypto/cms/cms_cd.c
  - src/crypto/cms/cms_dd.c               - src/crypto/cms/cms_enc.c
  - src/crypto/cms/cms_env.c              - src/crypto/cms/cms_err.c
  - src/crypto/cms/cms_ess.c              - src/crypto/cms/cms_io.c
  - src/crypto/cms/cms_lcl.h              - src/crypto/cms/cms_lib.c
  - src/crypto/cms/cms_pwri.c             - src/crypto/cms/cms_sd.c
  - src/crypto/cms/cms_smime.c            - src/crypto/comp/c_rle.c
  - src/crypto/comp/c_zlib.c              - src/crypto/comp/comp.h
  - src/crypto/comp/comp_err.c            - src/crypto/comp/comp_lib.c
  - src/crypto/conf/README                - src/crypto/conf/conf.h
  - src/crypto/conf/conf_api.c            - src/crypto/conf/conf_api.h
  - src/crypto/conf/conf_def.c            - src/crypto/conf/conf_def.h
  - src/crypto/conf/conf_err.c            - src/crypto/conf/conf_lib.c
  - src/crypto/conf/conf_mall.c           - src/crypto/conf/conf_mod.c
  - src/crypto/conf/conf_sap.c            - src/crypto/conf/keysets.pl
  - src/crypto/conf/ssleay.cnf            - src/crypto/des/COPYRIGHT
  - src/crypto/des/cbc_cksm.c             - src/crypto/des/cbc_enc.c
  - src/crypto/des/cfb64ede.c             - src/crypto/des/cfb64enc.c
  - src/crypto/des/cfb_enc.c              - src/crypto/des/des.h
  - src/crypto/des/des_enc.c              - src/crypto/des/des_locl.h
  - src/crypto/des/ecb3_enc.c             - src/crypto/des/ecb_enc.c
  - src/crypto/des/ede_cbcm_enc.c         - src/crypto/des/enc_read.c
  - src/crypto/des/enc_writ.c             - src/crypto/des/fcrypt.c
  - src/crypto/des/fcrypt_b.c             - src/crypto/des/ncbc_enc.c
  - src/crypto/des/ofb64ede.c             - src/crypto/des/ofb64enc.c
  - src/crypto/des/ofb_enc.c              - src/crypto/des/pcbc_enc.c
  - src/crypto/des/qud_cksm.c             - src/crypto/des/rand_key.c
  - src/crypto/des/set_key.c              - src/crypto/des/spr.h
  - src/crypto/des/str2key.c              - src/crypto/des/xcbc_enc.c
  - src/crypto/des/asm/crypt586.pl        - src/crypto/des/asm/des-586.pl
  - src/crypto/des/asm/des_enc.m4         - src/crypto/des/asm/desboth.pl
  - src/crypto/dh/dh.h                    - src/crypto/dh/dh_ameth.c
  - src/crypto/dh/dh_asn1.c               - src/crypto/dh/dh_check.c
  - src/crypto/dh/dh_depr.c               - src/crypto/dh/dh_err.c
  - src/crypto/dh/dh_gen.c                - src/crypto/dh/dh_key.c
  - src/crypto/dh/dh_lib.c                - src/crypto/dh/dh_pmeth.c
  - src/crypto/dh/dh_prn.c                - src/crypto/dsa/dsa.h
  - src/crypto/dsa/dsa_ameth.c            - src/crypto/dsa/dsa_asn1.c
  - src/crypto/dsa/dsa_depr.c             - src/crypto/dsa/dsa_err.c
  - src/crypto/dsa/dsa_gen.c              - src/crypto/dsa/dsa_key.c
  - src/crypto/dsa/dsa_lib.c              - src/crypto/dsa/dsa_locl.h
  - src/crypto/dsa/dsa_ossl.c             - src/crypto/dsa/dsa_pmeth.c
  - src/crypto/dsa/dsa_prn.c              - src/crypto/dsa/dsa_sign.c
  - src/crypto/dsa/dsa_vrf.c              - src/crypto/dso/dso.h
  - src/crypto/dso/dso_dlfcn.c            - src/crypto/dso/dso_err.c
  - src/crypto/dso/dso_lib.c              - src/crypto/dso/dso_null.c
  - src/crypto/dso/dso_openssl.c          - src/crypto/ec/ec.h
  - src/crypto/ec/ec2_mult.c              - src/crypto/ec/ec2_oct.c
  - src/crypto/ec/ec2_smpl.c              - src/crypto/ec/ec_ameth.c
  - src/crypto/ec/ec_asn1.c               - src/crypto/ec/ec_check.c
  - src/crypto/ec/ec_curve.c              - src/crypto/ec/ec_cvt.c
  - src/crypto/ec/ec_err.c                - src/crypto/ec/ec_key.c
  - src/crypto/ec/ec_lcl.h                - src/crypto/ec/ec_lib.c
  - src/crypto/ec/ec_mult.c               - src/crypto/ec/ec_oct.c
  - src/crypto/ec/ec_pmeth.c              - src/crypto/ec/ec_print.c
  - src/crypto/ec/eck_prn.c               - src/crypto/ec/ecp_mont.c
  - src/crypto/ec/ecp_nist.c              - src/crypto/ec/ecp_nistp224.c
  - src/crypto/ec/ecp_nistp256.c          - src/crypto/ec/ecp_nistp521.c
  - src/crypto/ec/ecp_nistputil.c         - src/crypto/ec/ecp_oct.c
  - src/crypto/ec/ecp_smpl.c              - src/crypto/ecdh/ecdh.h
  - src/crypto/ecdh/ech_err.c             - src/crypto/ecdh/ech_key.c
  - src/crypto/ecdh/ech_lib.c             - src/crypto/ecdh/ech_locl.h
  - src/crypto/ecdsa/ecdsa.h              - src/crypto/ecdsa/ecs_asn1.c
  - src/crypto/ecdsa/ecs_err.c            - src/crypto/ecdsa/ecs_lib.c
  - src/crypto/ecdsa/ecs_locl.h           - src/crypto/ecdsa/ecs_ossl.c
  - src/crypto/ecdsa/ecs_sign.c           - src/crypto/ecdsa/ecs_vrf.c
  - src/crypto/engine/README              - src/crypto/engine/eng_aesni.c
  - src/crypto/engine/eng_all.c           - src/crypto/engine/eng_cnf.c
  - src/crypto/engine/eng_ctrl.c          - src/crypto/engine/eng_dyn.c
  - src/crypto/engine/eng_err.c           - src/crypto/engine/eng_fat.c
  - src/crypto/engine/eng_init.c          - src/crypto/engine/eng_int.h
  - src/crypto/engine/eng_lib.c           - src/crypto/engine/eng_list.c
  - src/crypto/engine/eng_openssl.c       - src/crypto/engine/eng_padlock.c
  - src/crypto/engine/eng_padlock.ec      - src/crypto/engine/eng_pkey.c
  - src/crypto/engine/eng_table.c         - src/crypto/engine/engine.h
  - src/crypto/engine/tb_asnmth.c         - src/crypto/engine/tb_cipher.c
  - src/crypto/engine/tb_dh.c             - src/crypto/engine/tb_digest.c
  - src/crypto/engine/tb_dsa.c            - src/crypto/engine/tb_ecdh.c
  - src/crypto/engine/tb_ecdsa.c          - src/crypto/engine/tb_pkmeth.c
  - src/crypto/engine/tb_rand.c           - src/crypto/engine/tb_rsa.c
  - src/crypto/engine/tb_store.c          - src/crypto/err/err.c
  - src/crypto/err/err.h                  - src/crypto/err/err_all.c
  - src/crypto/err/err_prn.c              - src/crypto/err/openssl.ec
  - src/crypto/evp/bio_b64.c              - src/crypto/evp/bio_enc.c
  - src/crypto/evp/bio_md.c               - src/crypto/evp/c_all.c
  - src/crypto/evp/digest.c               - src/crypto/evp/e_aes.c
  - src/crypto/evp/e_aes_cbc_hmac_sha1.c
  - src/crypto/evp/e_bf.c                 - src/crypto/evp/e_camellia.c
  - src/crypto/evp/e_cast.c               - src/crypto/evp/e_chacha.c
  - src/crypto/evp/e_chacha20poly1305.c   - src/crypto/evp/e_des.c
  - src/crypto/evp/e_des3.c               - src/crypto/evp/e_gost2814789.c
  - src/crypto/evp/e_idea.c               - src/crypto/evp/e_null.c
  - src/crypto/evp/e_old.c                - src/crypto/evp/e_rc2.c
  - src/crypto/evp/e_rc4.c                - src/crypto/evp/e_rc4_hmac_md5.c
  - src/crypto/evp/e_xcbc_d.c             - src/crypto/evp/encode.c
  - src/crypto/evp/evp.h                  - src/crypto/evp/evp_aead.c
  - src/crypto/evp/evp_enc.c              - src/crypto/evp/evp_err.c
  - src/crypto/evp/evp_key.c              - src/crypto/evp/evp_lib.c
  - src/crypto/evp/evp_locl.h             - src/crypto/evp/evp_pbe.c
  - src/crypto/evp/evp_pkey.c             - src/crypto/evp/m_dss.c
  - src/crypto/evp/m_dss1.c               - src/crypto/evp/m_ecdsa.c
  - src/crypto/evp/m_gost2814789.c        - src/crypto/evp/m_gostr341194.c
  - src/crypto/evp/m_md4.c                - src/crypto/evp/m_md5.c
  - src/crypto/evp/m_null.c               - src/crypto/evp/m_ripemd.c
  - src/crypto/evp/m_sha1.c               - src/crypto/evp/m_sigver.c
  - src/crypto/evp/m_streebog.c           - src/crypto/evp/m_wp.c
  - src/crypto/evp/names.c                - src/crypto/evp/p5_crpt.c
  - src/crypto/evp/p5_crpt2.c             - src/crypto/evp/p_dec.c
  - src/crypto/evp/p_enc.c                - src/crypto/evp/p_lib.c
  - src/crypto/evp/p_open.c               - src/crypto/evp/p_seal.c
  - src/crypto/evp/p_sign.c               - src/crypto/evp/p_verify.c
  - src/crypto/evp/pmeth_fn.c             - src/crypto/evp/pmeth_gn.c
  - src/crypto/evp/pmeth_lib.c            - src/crypto/gost/gost.h
  - src/crypto/gost/gost2814789.c         - src/crypto/gost/gost89_keywrap.c
  - src/crypto/gost/gost89_params.c       - src/crypto/gost/gost89imit_ameth.c
  - src/crypto/gost/gost89imit_pmeth.c    - src/crypto/gost/gost_asn1.c
  - src/crypto/gost/gost_asn1.h           - src/crypto/gost/gost_err.c
  - src/crypto/gost/gost_locl.h           - src/crypto/gost/gostr341001.c
  - src/crypto/gost/gostr341001_ameth.c   - src/crypto/gost/gostr341001_key.c
  - src/crypto/gost/gostr341001_params.c
  - src/crypto/gost/gostr341001_pmeth.c   - src/crypto/gost/gostr341194.c
  - src/crypto/gost/streebog.c            - src/crypto/hmac/hm_ameth.c
  - src/crypto/hmac/hm_pmeth.c            - src/crypto/hmac/hmac.c
  - src/crypto/hmac/hmac.h                - src/crypto/idea/i_cbc.c
  - src/crypto/idea/i_cfb64.c             - src/crypto/idea/i_ecb.c
  - src/crypto/idea/i_ofb64.c             - src/crypto/idea/i_skey.c
  - src/crypto/idea/idea.h                - src/crypto/idea/idea_lcl.h
  - src/crypto/krb5/krb5_asn.c            - src/crypto/krb5/krb5_asn.h
  - src/crypto/lhash/lh_stats.c           - src/crypto/lhash/lhash.c
  - src/crypto/lhash/lhash.h              - src/crypto/md4/md4.h
  - src/crypto/md4/md4_dgst.c             - src/crypto/md4/md4_locl.h
  - src/crypto/md4/md4_one.c              - src/crypto/md5/md5.h
  - src/crypto/md5/md5_dgst.c             - src/crypto/md5/md5_locl.h
  - src/crypto/md5/md5_one.c              - src/crypto/md5/asm/md5-586.pl
  - src/crypto/md5/asm/md5-ia64.S         - src/crypto/md5/asm/md5-x86_64.pl
  - src/crypto/modes/cbc128.c             - src/crypto/modes/ccm128.c
  - src/crypto/modes/cfb128.c             - src/crypto/modes/ctr128.c
  - src/crypto/modes/cts128.c             - src/crypto/modes/gcm128.c
  - src/crypto/modes/modes.h              - src/crypto/modes/modes_lcl.h
  - src/crypto/modes/ofb128.c             - src/crypto/modes/xts128.c
  - src/crypto/modes/asm/ghash-alpha.pl   - src/crypto/modes/asm/ghash-armv4.pl
  - src/crypto/modes/asm/ghash-ia64.pl    
  - src/crypto/modes/asm/ghash-parisc.pl
  - src/crypto/modes/asm/ghash-s390x.pl   
  - src/crypto/modes/asm/ghash-sparcv9.pl
  - src/crypto/modes/asm/ghash-x86.pl     
  - src/crypto/modes/asm/ghash-x86_64.pl
  - src/crypto/objects/o_names.c          - src/crypto/objects/obj_dat.c
  - src/crypto/objects/obj_dat.pl         - src/crypto/objects/obj_err.c
  - src/crypto/objects/obj_lib.c          - src/crypto/objects/obj_mac.num
  - src/crypto/objects/obj_xref.c         - src/crypto/objects/obj_xref.h
  - src/crypto/objects/obj_xref.txt       - src/crypto/objects/objects.README
  - src/crypto/objects/objects.h          - src/crypto/objects/objects.pl
  - src/crypto/objects/objects.txt        - src/crypto/objects/objxref.pl
  - src/crypto/ocsp/ocsp.h                - src/crypto/ocsp/ocsp_asn.c
  - src/crypto/ocsp/ocsp_cl.c             - src/crypto/ocsp/ocsp_err.c
  - src/crypto/ocsp/ocsp_ext.c            - src/crypto/ocsp/ocsp_ht.c
  - src/crypto/ocsp/ocsp_lib.c            - src/crypto/ocsp/ocsp_prn.c
  - src/crypto/ocsp/ocsp_srv.c            - src/crypto/ocsp/ocsp_vfy.c
  - src/crypto/pem/message                - src/crypto/pem/pem.h
  - src/crypto/pem/pem2.h                 - src/crypto/pem/pem_all.c
  - src/crypto/pem/pem_err.c              - src/crypto/pem/pem_info.c
  - src/crypto/pem/pem_lib.c              - src/crypto/pem/pem_oth.c
  - src/crypto/pem/pem_pk8.c              - src/crypto/pem/pem_pkey.c
  - src/crypto/pem/pem_seal.c             - src/crypto/pem/pem_sign.c
  - src/crypto/pem/pem_x509.c             - src/crypto/pem/pem_xaux.c
  - src/crypto/pem/pkcs7.lis              - src/crypto/pem/pvkfmt.c
  - src/crypto/perlasm/cbc.pl             - src/crypto/perlasm/ppc-xlate.pl
  - src/crypto/perlasm/readme             - src/crypto/perlasm/x86_64-xlate.pl
  - src/crypto/perlasm/x86asm.pl          - src/crypto/perlasm/x86gas.pl
  - src/crypto/pkcs12/p12_add.c           - src/crypto/pkcs12/p12_asn.c
  - src/crypto/pkcs12/p12_attr.c          - src/crypto/pkcs12/p12_crpt.c
  - src/crypto/pkcs12/p12_crt.c           - src/crypto/pkcs12/p12_decr.c
  - src/crypto/pkcs12/p12_init.c          - src/crypto/pkcs12/p12_key.c
  - src/crypto/pkcs12/p12_kiss.c          - src/crypto/pkcs12/p12_mutl.c
  - src/crypto/pkcs12/p12_npas.c          - src/crypto/pkcs12/p12_p8d.c
  - src/crypto/pkcs12/p12_p8e.c           - src/crypto/pkcs12/p12_utl.c
  - src/crypto/pkcs12/pk12err.c           - src/crypto/pkcs12/pkcs12.h
  - src/crypto/pkcs7/bio_pk7.c            - src/crypto/pkcs7/pk7_asn1.c
  - src/crypto/pkcs7/pk7_attr.c           - src/crypto/pkcs7/pk7_doit.c
  - src/crypto/pkcs7/pk7_lib.c            - src/crypto/pkcs7/pk7_mime.c
  - src/crypto/pkcs7/pk7_smime.c          - src/crypto/pkcs7/pkcs7.h
  - src/crypto/pkcs7/pkcs7err.c           
  - src/crypto/poly1305/poly1305-donna.c
  - src/crypto/poly1305/poly1305.c        - src/crypto/poly1305/poly1305.h
  - src/crypto/rand/rand.h                - src/crypto/rand/rand_err.c
  - src/crypto/rand/rand_lib.c            - src/crypto/rand/randfile.c
  - src/crypto/rc2/rc2.h                  - src/crypto/rc2/rc2_cbc.c
  - src/crypto/rc2/rc2_ecb.c              - src/crypto/rc2/rc2_locl.h
  - src/crypto/rc2/rc2_skey.c             - src/crypto/rc2/rc2cfb64.c
  - src/crypto/rc2/rc2ofb64.c             - src/crypto/rc2/rrc2.doc
  - src/crypto/rc2/version                - src/crypto/rc4/rc4.h
  - src/crypto/rc4/rc4_enc.c              - src/crypto/rc4/rc4_locl.h
  - src/crypto/rc4/rc4_skey.c             - src/crypto/rc4/asm/rc4-586.pl
  - src/crypto/rc4/asm/rc4-ia64.pl        
  - src/crypto/rc4/asm/rc4-md5-x86_64.pl
  - src/crypto/rc4/asm/rc4-parisc.pl      - src/crypto/rc4/asm/rc4-s390x.pl
  - src/crypto/rc4/asm/rc4-x86_64.pl      - src/crypto/ripemd/README
  - src/crypto/ripemd/ripemd.h            - src/crypto/ripemd/rmd_dgst.c
  - src/crypto/ripemd/rmd_locl.h          - src/crypto/ripemd/rmd_one.c
  - src/crypto/ripemd/rmdconst.h          - src/crypto/ripemd/asm/rmd-586.pl
  - src/crypto/rsa/rsa.h                  - src/crypto/rsa/rsa_ameth.c
  - src/crypto/rsa/rsa_asn1.c             - src/crypto/rsa/rsa_chk.c
  - src/crypto/rsa/rsa_crpt.c             - src/crypto/rsa/rsa_depr.c
  - src/crypto/rsa/rsa_eay.c              - src/crypto/rsa/rsa_err.c
  - src/crypto/rsa/rsa_gen.c              - src/crypto/rsa/rsa_lib.c
  - src/crypto/rsa/rsa_locl.h             - src/crypto/rsa/rsa_none.c
  - src/crypto/rsa/rsa_oaep.c             - src/crypto/rsa/rsa_pk1.c
  - src/crypto/rsa/rsa_pmeth.c            - src/crypto/rsa/rsa_prn.c
  - src/crypto/rsa/rsa_pss.c              - src/crypto/rsa/rsa_saos.c
  - src/crypto/rsa/rsa_sign.c             - src/crypto/rsa/rsa_ssl.c
  - src/crypto/rsa/rsa_x931.c             - src/crypto/sha/sha.h
  - src/crypto/sha/sha1_one.c             - src/crypto/sha/sha1dgst.c
  - src/crypto/sha/sha256.c               - src/crypto/sha/sha512.c
  - src/crypto/sha/sha_locl.h             - src/crypto/sha/asm/sha1-586.pl
  - src/crypto/sha/asm/sha1-alpha.pl      
  - src/crypto/sha/asm/sha1-armv4-large.pl
  - src/crypto/sha/asm/sha1-ia64.pl       - src/crypto/sha/asm/sha1-mips.pl
  - src/crypto/sha/asm/sha1-parisc.pl     - src/crypto/sha/asm/sha1-ppc.pl
  - src/crypto/sha/asm/sha1-s390x.pl      - src/crypto/sha/asm/sha1-sparcv9.pl
  - src/crypto/sha/asm/sha1-sparcv9a.pl   - src/crypto/sha/asm/sha1-thumb.pl
  - src/crypto/sha/asm/sha1-x86_64.pl     - src/crypto/sha/asm/sha256-586.pl
  - src/crypto/sha/asm/sha256-armv4.pl    - src/crypto/sha/asm/sha512-586.pl
  - src/crypto/sha/asm/sha512-armv4.pl    - src/crypto/sha/asm/sha512-ia64.pl
  - src/crypto/sha/asm/sha512-mips.pl     - src/crypto/sha/asm/sha512-parisc.pl
  - src/crypto/sha/asm/sha512-ppc.pl      - src/crypto/sha/asm/sha512-s390x.pl
  - src/crypto/sha/asm/sha512-sparcv9.pl
  - src/crypto/sha/asm/sha512-x86_64.pl   - src/crypto/stack/safestack.h
  - src/crypto/stack/stack.c              - src/crypto/stack/stack.h
  - src/crypto/ts/ts.h                    - src/crypto/ts/ts_asn1.c
  - src/crypto/ts/ts_conf.c               - src/crypto/ts/ts_err.c
  - src/crypto/ts/ts_lib.c                - src/crypto/ts/ts_req_print.c
  - src/crypto/ts/ts_req_utils.c          - src/crypto/ts/ts_rsp_print.c
  - src/crypto/ts/ts_rsp_sign.c           - src/crypto/ts/ts_rsp_utils.c
  - src/crypto/ts/ts_rsp_verify.c         - src/crypto/ts/ts_verify_ctx.c
  - src/crypto/txt_db/txt_db.c            - src/crypto/txt_db/txt_db.h
  - src/crypto/ui/ui.h                    - src/crypto/ui/ui_compat.h
  - src/crypto/ui/ui_err.c                - src/crypto/ui/ui_lib.c
  - src/crypto/ui/ui_locl.h               - src/crypto/ui/ui_openssl.c
  - src/crypto/ui/ui_util.c               - src/crypto/whrlpool/whrlpool.h
  - src/crypto/whrlpool/wp_block.c        - src/crypto/whrlpool/wp_dgst.c
  - src/crypto/whrlpool/wp_locl.h         - src/crypto/whrlpool/asm/wp-mmx.pl
  - src/crypto/whrlpool/asm/wp-x86_64.pl
  - src/crypto/x509/by_dir.c              - src/crypto/x509/by_file.c
  - src/crypto/x509/by_mem.c              - src/crypto/x509/x509.h
  - src/crypto/x509/x509_att.c            - src/crypto/x509/x509_cmp.c
  - src/crypto/x509/x509_d2.c             - src/crypto/x509/x509_def.c
  - src/crypto/x509/x509_err.c            - src/crypto/x509/x509_ext.c
  - src/crypto/x509/x509_lcl.h            - src/crypto/x509/x509_lu.c
  - src/crypto/x509/x509_obj.c            - src/crypto/x509/x509_r2x.c
  - src/crypto/x509/x509_req.c            - src/crypto/x509/x509_set.c
  - src/crypto/x509/x509_trs.c            - src/crypto/x509/x509_txt.c
  - src/crypto/x509/x509_v3.c             - src/crypto/x509/x509_vfy.c
  - src/crypto/x509/x509_vfy.h            - src/crypto/x509/x509_vpm.c
  - src/crypto/x509/x509cset.c            - src/crypto/x509/x509name.c
  - src/crypto/x509/x509rset.c            - src/crypto/x509/x509spki.c
  - src/crypto/x509/x509type.c            - src/crypto/x509/x_all.c
  - src/crypto/x509v3/ext_dat.h           - src/crypto/x509v3/pcy_cache.c
  - src/crypto/x509v3/pcy_data.c          - src/crypto/x509v3/pcy_int.h
  - src/crypto/x509v3/pcy_lib.c           - src/crypto/x509v3/pcy_map.c
  - src/crypto/x509v3/pcy_node.c          - src/crypto/x509v3/pcy_tree.c
  - src/crypto/x509v3/v3_akey.c           - src/crypto/x509v3/v3_akeya.c
  - src/crypto/x509v3/v3_alt.c            - src/crypto/x509v3/v3_bcons.c
  - src/crypto/x509v3/v3_bitst.c          - src/crypto/x509v3/v3_conf.c
  - src/crypto/x509v3/v3_cpols.c          - src/crypto/x509v3/v3_crld.c
  - src/crypto/x509v3/v3_enum.c           - src/crypto/x509v3/v3_extku.c
  - src/crypto/x509v3/v3_genn.c           - src/crypto/x509v3/v3_ia5.c
  - src/crypto/x509v3/v3_info.c           - src/crypto/x509v3/v3_int.c
  - src/crypto/x509v3/v3_lib.c            - src/crypto/x509v3/v3_ncons.c
  - src/crypto/x509v3/v3_ocsp.c           - src/crypto/x509v3/v3_pci.c
  - src/crypto/x509v3/v3_pcia.c           - src/crypto/x509v3/v3_pcons.c
  - src/crypto/x509v3/v3_pku.c            - src/crypto/x509v3/v3_pmaps.c
  - src/crypto/x509v3/v3_prn.c            - src/crypto/x509v3/v3_purp.c
  - src/crypto/x509v3/v3_skey.c           - src/crypto/x509v3/v3_sxnet.c
  - src/crypto/x509v3/v3_utl.c            - src/crypto/x509v3/v3err.c
  - src/crypto/x509v3/x509v3.h            - src/doc/openssl.txt
  - src/doc/standards.txt                 - src/doc/crypto/DES_set_key.pod
  - src/doc/crypto/DH_generate_key.pod    
  - src/doc/crypto/DH_generate_parameters.pod
  - src/doc/crypto/DH_get_ex_new_index.pod
  - src/doc/crypto/DH_new.pod             - src/doc/crypto/DH_set_method.pod
  - src/doc/crypto/DH_size.pod            - src/doc/crypto/DSA_SIG_new.pod
  - src/doc/crypto/DSA_do_sign.pod        - src/doc/crypto/DSA_dup_DH.pod
  - src/doc/crypto/DSA_generate_key.pod   
  - src/doc/crypto/DSA_generate_parameters.pod
  - src/doc/crypto/DSA_get_ex_new_index.pod
  - src/doc/crypto/DSA_new.pod            - src/doc/crypto/DSA_set_method.pod
  - src/doc/crypto/DSA_sign.pod           - src/doc/crypto/DSA_size.pod
  - src/doc/crypto/EC_GFp_simple_method.pod
  - src/doc/crypto/EC_GROUP_copy.pod      - src/doc/crypto/EC_GROUP_new.pod
  - src/doc/crypto/EC_KEY_new.pod         - src/doc/crypto/EC_POINT_add.pod
  - src/doc/crypto/EC_POINT_new.pod       - src/doc/crypto/ERR.pod
  - src/doc/crypto/ERR_GET_LIB.pod        - src/doc/crypto/ERR_clear_error.pod
  - src/doc/crypto/ERR_error_string.pod   - src/doc/crypto/ERR_get_error.pod
  - src/doc/crypto/ERR_load_crypto_strings.pod
  - src/doc/crypto/ERR_load_strings.pod   - src/doc/crypto/ERR_print_errors.pod
  - src/doc/crypto/ERR_put_error.pod      - src/doc/crypto/ERR_remove_state.pod
  - src/doc/crypto/ERR_set_mark.pod       - src/doc/crypto/EVP_BytesToKey.pod
  - src/doc/crypto/EVP_DigestInit.pod     
  - src/doc/crypto/EVP_DigestSignInit.pod
  - src/doc/crypto/EVP_DigestVerifyInit.pod
  - src/doc/crypto/EVP_EncryptInit.pod    - src/doc/crypto/EVP_OpenInit.pod
  - src/doc/crypto/EVP_PKEY_CTX_ctrl.pod
  - src/doc/crypto/EVP_PKEY_CTX_new.pod   - src/doc/crypto/EVP_PKEY_cmp.pod
  - src/doc/crypto/EVP_PKEY_decrypt.pod   - src/doc/crypto/EVP_PKEY_derive.pod
  - src/doc/crypto/EVP_PKEY_encrypt.pod   
  - src/doc/crypto/EVP_PKEY_get_default_digest.pod
  - src/doc/crypto/EVP_PKEY_keygen.pod    - src/doc/crypto/EVP_PKEY_new.pod
  - src/doc/crypto/EVP_PKEY_print_private.pod
  - src/doc/crypto/EVP_PKEY_set1_RSA.pod
  - src/doc/crypto/EVP_PKEY_sign.pod      - src/doc/crypto/EVP_PKEY_verify.pod
  - src/doc/crypto/EVP_PKEY_verify_recover.pod
  - src/doc/crypto/EVP_SealInit.pod       - src/doc/crypto/EVP_SignInit.pod
  - src/doc/crypto/EVP_VerifyInit.pod     - src/doc/crypto/HMAC.pod
  - src/doc/crypto/MD5.pod                - src/doc/crypto/OBJ_nid2obj.pod
  - src/doc/crypto/OPENSSL_VERSION_NUMBER.pod
  - src/doc/crypto/OPENSSL_config.pod     
  - src/doc/crypto/OPENSSL_load_builtin_modules.pod
  - src/doc/crypto/OpenSSL_add_all_algorithms.pod
  - src/doc/crypto/PEM_read_bio_PrivateKey.pod
  - src/doc/crypto/PEM_write_bio_CMS_stream.pod
  - src/doc/crypto/PEM_write_bio_PKCS7_stream.pod
  - src/doc/crypto/PKCS12_create.pod      - src/doc/crypto/PKCS12_parse.pod
  - src/doc/crypto/PKCS5_PBKDF2_HMAC.pod
  - src/doc/crypto/PKCS7_decrypt.pod      - src/doc/crypto/PKCS7_encrypt.pod
  - src/doc/crypto/PKCS7_sign.pod         
  - src/doc/crypto/PKCS7_sign_add_signer.pod
  - src/doc/crypto/PKCS7_verify.pod       - src/doc/crypto/RAND.pod
  - src/doc/crypto/RAND_add.pod           - src/doc/crypto/RAND_bytes.pod
  - src/doc/crypto/RAND_cleanup.pod       - src/doc/crypto/RAND_load_file.pod
  - src/doc/crypto/RAND_set_rand_method.pod
  - src/doc/crypto/RC4.pod                - src/doc/crypto/RIPEMD160.pod
  - src/doc/crypto/RSA_blinding_on.pod    - src/doc/crypto/RSA_check_key.pod
  - src/doc/crypto/RSA_generate_key.pod   
  - src/doc/crypto/RSA_get_ex_new_index.pod
  - src/doc/crypto/RSA_new.pod            
  - src/doc/crypto/RSA_padding_add_PKCS1_type_1.pod
  - src/doc/crypto/RSA_print.pod          
  - src/doc/crypto/RSA_private_encrypt.pod
  - src/doc/crypto/RSA_public_encrypt.pod
  - src/doc/crypto/RSA_set_method.pod     - src/doc/crypto/RSA_sign.pod
  - src/doc/crypto/RSA_sign_ASN1_OCTET_STRING.pod
  - src/doc/crypto/RSA_size.pod           - src/doc/crypto/SHA1.pod
  - src/doc/crypto/SMIME_read_CMS.pod     - src/doc/crypto/SMIME_read_PKCS7.pod
  - src/doc/crypto/SMIME_write_CMS.pod    
  - src/doc/crypto/SMIME_write_PKCS7.pod
  - src/doc/crypto/X509_NAME_ENTRY_get_object.pod
  - src/doc/crypto/X509_NAME_add_entry_by_txt.pod
  - src/doc/crypto/X509_NAME_get_index_by_NID.pod
  - src/doc/crypto/X509_NAME_print_ex.pod
  - src/doc/crypto/X509_STORE_CTX_get_error.pod
  - src/doc/crypto/X509_STORE_CTX_get_ex_new_index.pod
  - src/doc/crypto/X509_STORE_CTX_new.pod
  - src/doc/crypto/X509_STORE_CTX_set_verify_cb.pod
  - src/doc/crypto/X509_STORE_set_verify_cb_func.pod
  - src/doc/crypto/X509_VERIFY_PARAM_set_flags.pod
  - src/doc/crypto/X509_new.pod           - src/doc/crypto/X509_verify_cert.pod
  - src/doc/crypto/bn.pod                 - src/doc/crypto/d2i_ASN1_OBJECT.pod
  - src/doc/crypto/d2i_DHparams.pod       - src/doc/crypto/d2i_DSAPublicKey.pod
  - src/doc/crypto/d2i_ECPKParameters.pod
  - src/doc/crypto/d2i_RSAPublicKey.pod   - src/doc/crypto/d2i_X509.pod
  - src/doc/crypto/d2i_X509_ALGOR.pod     - src/doc/crypto/d2i_X509_CRL.pod
  - src/doc/crypto/d2i_X509_NAME.pod      - src/doc/crypto/d2i_X509_REQ.pod
  - src/doc/crypto/d2i_X509_SIG.pod       - src/doc/crypto/dh.pod
  - src/doc/crypto/dsa.pod                - src/doc/crypto/ec.pod
  - src/doc/crypto/engine.pod             - src/doc/crypto/evp.pod
  - src/doc/crypto/i2d_CMS_bio_stream.pod
  - src/doc/crypto/i2d_PKCS7_bio_stream.pod
  - src/doc/crypto/lh_stats.pod           - src/doc/crypto/rsa.pod
  - src/doc/crypto/x509.pod               - src/doc/ssl/BIO_f_ssl.3
  - src/doc/ssl/SSL_CIPHER_get_name.3     
  - src/doc/ssl/SSL_COMP_add_compression_method.3
  - src/doc/ssl/SSL_CTX_add_extra_chain_cert.3
  - src/doc/ssl/SSL_CTX_add_session.3     - src/doc/ssl/SSL_CTX_ctrl.3
  - src/doc/ssl/SSL_CTX_flush_sessions.3
  - src/doc/ssl/SSL_CTX_free.3            
  - src/doc/ssl/SSL_CTX_get_ex_new_index.3
  - src/doc/ssl/SSL_CTX_get_verify_mode.3
  - src/doc/ssl/SSL_CTX_load_verify_locations.3
  - src/doc/ssl/SSL_CTX_new.3             - src/doc/ssl/SSL_CTX_sess_number.3
  - src/doc/ssl/SSL_CTX_sess_set_cache_size.3
  - src/doc/ssl/SSL_CTX_sess_set_get_cb.3
  - src/doc/ssl/SSL_CTX_sessions.3        
  - src/doc/ssl/SSL_CTX_set_cert_store.3
  - src/doc/ssl/SSL_CTX_set_cert_verify_callback.3
  - src/doc/ssl/SSL_CTX_set_cipher_list.3
  - src/doc/ssl/SSL_CTX_set_client_CA_list.3
  - src/doc/ssl/SSL_CTX_set_client_cert_cb.3
  - src/doc/ssl/SSL_CTX_set_default_passwd_cb.3
  - src/doc/ssl/SSL_CTX_set_generate_session_id.3
  - src/doc/ssl/SSL_CTX_set_info_callback.3
  - src/doc/ssl/SSL_CTX_set_max_cert_list.3
  - src/doc/ssl/SSL_CTX_set_mode.3        
  - src/doc/ssl/SSL_CTX_set_msg_callback.3
  - src/doc/ssl/SSL_CTX_set_options.3     
  - src/doc/ssl/SSL_CTX_set_psk_client_callback.3
  - src/doc/ssl/SSL_CTX_set_quiet_shutdown.3
  - src/doc/ssl/SSL_CTX_set_session_cache_mode.3
  - src/doc/ssl/SSL_CTX_set_session_id_context.3
  - src/doc/ssl/SSL_CTX_set_ssl_version.3
  - src/doc/ssl/SSL_CTX_set_timeout.3     
  - src/doc/ssl/SSL_CTX_set_tmp_dh_callback.3
  - src/doc/ssl/SSL_CTX_set_tmp_rsa_callback.3
  - src/doc/ssl/SSL_CTX_set_verify.3      
  - src/doc/ssl/SSL_CTX_use_certificate.3
  - src/doc/ssl/SSL_CTX_use_psk_identity_hint.3
  - src/doc/ssl/SSL_SESSION_free.3        
  - src/doc/ssl/SSL_SESSION_get_ex_new_index.3
  - src/doc/ssl/SSL_SESSION_get_time.3    - src/doc/ssl/SSL_accept.3
  - src/doc/ssl/SSL_alert_type_string.3   - src/doc/ssl/SSL_clear.3
  - src/doc/ssl/SSL_connect.3             - src/doc/ssl/SSL_do_handshake.3
  - src/doc/ssl/SSL_free.3                - src/doc/ssl/SSL_get_SSL_CTX.3
  - src/doc/ssl/SSL_get_ciphers.3         
  - src/doc/ssl/SSL_get_client_CA_list.3
  - src/doc/ssl/SSL_get_current_cipher.3
  - src/doc/ssl/SSL_get_default_timeout.3
  - src/doc/ssl/SSL_get_error.3           
  - src/doc/ssl/SSL_get_ex_data_X509_STORE_CTX_idx.3
  - src/doc/ssl/SSL_get_ex_new_index.3    - src/doc/ssl/SSL_get_fd.3
  - src/doc/ssl/SSL_get_peer_cert_chain.3
  - src/doc/ssl/SSL_get_peer_certificate.3
  - src/doc/ssl/SSL_get_psk_identity.3    - src/doc/ssl/SSL_get_rbio.3
  - src/doc/ssl/SSL_get_session.3         - src/doc/ssl/SSL_get_verify_result.3
  - src/doc/ssl/SSL_get_version.3         - src/doc/ssl/SSL_library_init.3
  - src/doc/ssl/SSL_load_client_CA_file.3
  - src/doc/ssl/SSL_new.3                 - src/doc/ssl/SSL_pending.3
  - src/doc/ssl/SSL_read.3                - src/doc/ssl/SSL_rstate_string.3
  - src/doc/ssl/SSL_session_reused.3      - src/doc/ssl/SSL_set_bio.3
  - src/doc/ssl/SSL_set_connect_state.3   - src/doc/ssl/SSL_set_fd.3
  - src/doc/ssl/SSL_set_session.3         - src/doc/ssl/SSL_set_shutdown.3
  - src/doc/ssl/SSL_set_verify_result.3   - src/doc/ssl/SSL_shutdown.3
  - src/doc/ssl/SSL_state_string.3        - src/doc/ssl/SSL_want.3
  - src/doc/ssl/SSL_write.3               - src/doc/ssl/d2i_SSL_SESSION.3
  - src/doc/ssl/ssl.3                     - src/ssl/bio_ssl.c
  - src/ssl/bs_ber.c                      - src/ssl/bs_cbb.c
  - src/ssl/bs_cbs.c                      - src/ssl/bytestring.h
  - src/ssl/d1_both.c                     - src/ssl/d1_clnt.c
  - src/ssl/d1_enc.c                      - src/ssl/d1_lib.c
  - src/ssl/d1_meth.c                     - src/ssl/d1_pkt.c
  - src/ssl/d1_srtp.c                     - src/ssl/d1_srvr.c
  - src/ssl/dtls1.h                       - src/ssl/pqueue.c
  - src/ssl/pqueue.h                      - src/ssl/s23_clnt.c
  - src/ssl/s23_lib.c                     - src/ssl/s23_pkt.c
  - src/ssl/s23_srvr.c                    - src/ssl/s3_both.c
  - src/ssl/s3_cbc.c                      - src/ssl/s3_clnt.c
  - src/ssl/s3_lib.c                      - src/ssl/s3_pkt.c
  - src/ssl/s3_srvr.c                     - src/ssl/srtp.h
  - src/ssl/ssl.h                         - src/ssl/ssl2.h
  - src/ssl/ssl23.h                       - src/ssl/ssl3.h
  - src/ssl/ssl_algs.c                    - src/ssl/ssl_asn1.c
  - src/ssl/ssl_cert.c                    - src/ssl/ssl_ciph.c
  - src/ssl/ssl_err.c                     - src/ssl/ssl_err2.c
  - src/ssl/ssl_lib.c                     - src/ssl/ssl_locl.h
  - src/ssl/ssl_rsa.c                     - src/ssl/ssl_sess.c
  - src/ssl/ssl_stat.c                    - src/ssl/ssl_txt.c
  - src/ssl/t1_clnt.c                     - src/ssl/t1_enc.c
  - src/ssl/t1_lib.c                      - src/ssl/t1_meth.c
  - src/ssl/t1_reneg.c                    - src/ssl/t1_srvr.c
  - src/ssl/tls1.h                        - src/test/CAss.cnf
  - src/test/CAssdh.cnf                   - src/test/CAssdsa.cnf
  - src/test/CAssrsa.cnf                  - src/test/CAtsa.cnf
  - src/test/P1ss.cnf                     - src/test/P2ss.cnf
  - src/test/Sssdsa.cnf                   - src/test/Sssrsa.cnf
  - src/test/Uss.cnf                      - src/test/VMSca-response.1
  - src/test/VMSca-response.2             - src/test/asn1test.c
  - src/test/bctest                       - src/test/cms-examples.pl
  - src/test/cms-test.pl                  - src/test/methtest.c
  - src/test/pkcs7-1.pem                  - src/test/pkcs7.pem
  - src/test/pkits-test.pl                - src/test/r160test.c
  - src/test/smcont.txt                   - src/test/tcrl
  - src/test/test.cnf                     - src/test/test_aesni
  - src/test/test_padlock                 - src/test/testca
  - src/test/testcrl.pem                  - src/test/testenc
  - src/test/testgen                      - src/test/testp7.pem
  - src/test/testreq2.pem                 - src/test/testrsa.pem
  - src/test/testsid.pem                  - src/test/testss
  - src/test/testssl                      - src/test/testsslproxy
  - src/test/testtsa                      - src/test/testx509.pem
  - src/test/times                        - src/test/tpkcs7
  - src/test/tpkcs7d                      - src/test/treq
  - src/test/trsa                         - src/test/tsid
  - src/test/tx509                        - src/test/v3-cert1.pem
  - src/test/v3-cert2.pem                 - src/test/smime-certs/smdsa1.pem
  - src/test/smime-certs/smdsa2.pem       - src/test/smime-certs/smdsa3.pem
  - src/test/smime-certs/smdsap.pem       - src/test/smime-certs/smroot.pem
  - src/test/smime-certs/smrsa1.pem       - src/test/smime-certs/smrsa2.pem
  - src/test/smime-certs/smrsa3.pem       - src/util/mkerr.pl
  - src/util/mkstack.pl                   

  > Remove the libssl/src directory (beck@)

  ~ Makefile                              ~ generate_pkgconfig.sh
  ~ man/Makefile                          

  > Fix Makefile for file location moves (beck@)

== libexec =========================================================== 06/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/libexec

login_passwd

  ~ common.h                              ~ login.c

  > krb5 bits should rest in peace
  > OK deraadt (gsoares@)

== regress =========================================================== 07/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/regress

gnu

  ~ egcs/gcc/Makefile                     ~ egcs/libiberty/Makefile

  > Print SKIPPED if a regress test cannot be executed for some reason.
  > This allows to identify such tests by looking at their output. (bluhm@)

lib

  ~ libcrypto/pqueue/Makefile             ~ libcrypto/utf8/Makefile

  > Make this regress build again (beck@)

  ~ libssl/bytestring/Makefile            

  > Fix build of regress after source moves (beck@)

  ~ libtls/gotls/Makefile                 

  > Print SKIPPED if a regress test cannot be executed for some reason.
  > This allows to identify such tests by looking at their output. (bluhm@)

sbin

  ~ ipsecctl/sa11.in                      ~ ipsecctl/sa11.ok
  ~ ipsecctl/sa18.in                      ~ ipsecctl/sa18.ok
  ~ ipsecctl/sa21.in                      ~ ipsecctl/sa21.ok
  ~ ipsecctl/sa23.in                      ~ ipsecctl/sa23.ok
  ~ ipsecctl/sa6.in                       ~ ipsecctl/sa6.ok
  ~ ipsecctl/sa9.in                       ~ ipsecctl/sa9.ok

  > Remove obsolete DES-CBC tests (mikeb@)

  ~ ipsecctl/ike1.ok                      ~ ipsecctl/ike10.ok
  ~ ipsecctl/ike11.ok                     ~ ipsecctl/ike12.ok
  ~ ipsecctl/ike13.ok                     ~ ipsecctl/ike14.ok
  ~ ipsecctl/ike15.ok                     ~ ipsecctl/ike17.ok
  ~ ipsecctl/ike18.ok                     ~ ipsecctl/ike19.ok
  ~ ipsecctl/ike2.ok                      ~ ipsecctl/ike20.ok
  ~ ipsecctl/ike21.ok                     ~ ipsecctl/ike22.ok
  ~ ipsecctl/ike23.ok                     ~ ipsecctl/ike29.ok
  ~ ipsecctl/ike3.ok                      ~ ipsecctl/ike30.ok
  ~ ipsecctl/ike31.ok                     ~ ipsecctl/ike32.ok
  ~ ipsecctl/ike33.ok                     ~ ipsecctl/ike34.ok
  ~ ipsecctl/ike35.ok                     ~ ipsecctl/ike36.ok
  ~ ipsecctl/ike37.ok                     ~ ipsecctl/ike39.ok
  ~ ipsecctl/ike4.ok                      ~ ipsecctl/ike40.ok
  ~ ipsecctl/ike41.ok                     ~ ipsecctl/ike42.ok
  ~ ipsecctl/ike43.ok                     ~ ipsecctl/ike46.ok
  ~ ipsecctl/ike47.ok                     ~ ipsecctl/ike48.ok
  ~ ipsecctl/ike49.ok                     ~ ipsecctl/ike50.ok
  ~ ipsecctl/ike51.ok                     ~ ipsecctl/ike52.ok
  ~ ipsecctl/ike53.ok                     ~ ipsecctl/ike54.ok
  ~ ipsecctl/ike55.ok                     ~ ipsecctl/ike56.ok
  ~ ipsecctl/ike57.ok                     ~ ipsecctl/ike58.ok
  ~ ipsecctl/ike59.ok                     ~ ipsecctl/ike6.ok
  ~ ipsecctl/ike60.ok                     ~ ipsecctl/ike61.ok
  ~ ipsecctl/ike62.ok                     ~ ipsecctl/ike63.ok
  ~ ipsecctl/ike64.ok                     ~ ipsecctl/ike65.ok
  ~ ipsecctl/ike66.ok                     ~ ipsecctl/ike67.ok
  ~ ipsecctl/ike68.ok                     ~ ipsecctl/ike7.ok
  ~ ipsecctl/ike8.ok                      ~ ipsecctl/ike9.ok
  ~ ipsecctl/ikefail14.ok                 ~ ipsecctl/ikefail6.ok

  > Adjust for the new default MODP group (mikeb@)

  - isakmpd/rsakeygen/.cvsignore          - isakmpd/rsakeygen/Makefile
  - isakmpd/rsakeygen/rsakeygen.c         ~ isakmpd/Makefile

  > Remove old RSA key generation and verification test as it's done now
  > by LibreSSL regress tests;  checked with bcook@ (mikeb@)

  - isakmpd/b2n/Makefile                  - isakmpd/b2n/b2ntest.c
  ~ isakmpd/Makefile                      

  > Remove the GF(2**n) math test since isakmpd has been switched
  > to using D-H functions from libcrypto more than 6 years ago. (mikeb@)

  - isakmpd/ec2n/Makefile                 - isakmpd/ec2n/ec2ntest.c
  ~ isakmpd/Makefile                      

  > Remove the GF(2**n) math test since isakmpd has been switched
  > to using D-H functions from libcrypto more than 6 years ago. (mikeb@)

  - isakmpd/group/Makefile                - isakmpd/group/grouptest.c
  ~ isakmpd/Makefile                      

  > Remove the GF(2**n) math test since isakmpd has been switched
  > to using D-H functions from libcrypto more than 6 years ago. (mikeb@)

  ~ isakmpd/crypto/Makefile               ~ isakmpd/crypto/cryptotest.c
  ~ isakmpd/hmac/Makefile                 ~ isakmpd/prf/Makefile
  ~ isakmpd/util/Makefile                 ~ isakmpd/util/utiltest.c
  + isakmpd/common/log.c                  + isakmpd/common/monitor.c

  > Repair remaining isakmpd regress tests (mikeb@)

sys

  ~ crypto/aesctr/Makefile                

  > Pull in Chacha20 and Poly1305 source code as xform.o dependencies (mikeb@)

  ~ crypto/aesxts/Makefile                

  > Pull in Chacha20 and Poly1305 source code as xform.o dependencies (mikeb@)

  ~ crypto/enc/Makefile                   

  > Pull in Chacha20 and Poly1305 source code as xform.o dependencies (mikeb@)

  ~ net/pf_divert/Makefile                ~ net/pf_forward/Makefile
  ~ net/pf_fragment/Makefile              ~ netinet/arp/Makefile
  ~ netinet/pmtu/Makefile                 ~ netinet6/frag6/Makefile
  ~ netinet6/nd6/Makefile                 ~ netinet6/rh0/Makefile

  > Print SKIPPED if a regress test cannot be executed for some reason.
  > This allows to identify such tests by looking at their output. (bluhm@)

usr.bin

  ~ patch/Makefile                        

  > disable t3, it is known to fail (otto@)

usr.sbin

  ~ httpd/tests/Makefile                  ~ ospfd/Makefile
  ~ relayd/Makefile                       ~ switchd/Makefile
  ~ syslogd/Makefile                      

  > Print SKIPPED if a regress test cannot be executed for some reason.
  > This allows to identify such tests by looking at their output. (bluhm@)

== sbin ============================================================== 08/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sbin

dhclient

  ~ dhclient.c                            

  > Treat backoff_cutoff as a hard cutoff, not the midpoint in a range
  > from .5 to 1.5 ofthe value. This is how the man page describes it and
  > nobody can remember why it was not being used as a hard limit.
  > ok benno@ (krw@)

  ~ dhclient.c                            ~ dhcpd.h
  ~ dispatch.c                            ~ options.c
  ~ privsep.c                             ~ privsep.h

  > Kill 'ifi' global.
  > ok henning@, krw@ (mpi@)

disklabel

  ~ disklabel.c                           ~ editor.c

  > Allow editing cpg in expert mode and align the cpg field properly
  > ok krw@ (otto@)

ifconfig

  ~ brconfig.c                            ~ brconfig.h
  ~ ifconfig.c                            

  > Add switch(4) support to ifconfig
  > ok deraadt@ yasuoka@ reyk@ henning@ (goda@)

isakmpd

  ~ README                                

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

ping

  ~ ping.c                                

  > timinginfo is a flag to track if the received icmp packet is big
  > enough to carry timing information.
  > Do not treat it as a counter as it could overflow. (florian@)

  ~ ping.8                                ~ ping.c

  > In preparation for merging of ping(8) and ping6(8) the -n flag needs to
  > become the default. That means no DNS reverse look ups per default.
  > In practice this doesn't change anything since ping(8) only did
  > reverse DNS look ups per for weird corner cases:
  > 1) Something that's not an echo reply and -v was specified
  > 2) LSRR or RR IP options
  > With this pr_addr() can become the default address printing mechanism
  > and can be made AF independent. With that we get ping(8)'s -H option
  > for free.
  > OK sthen@, benno@
  > OK deraadt@ for the -H a long time ago when this were two diffs.
  > man page tweak jmc@ a long time ago
  > deraadt@ softened up and has no objections to -n per default
  > beck@ is in favor of no look ups per default. (florian@)

ping6

  ~ ping6.c                               

  > Reduce ping/ping6 difference in summary().
  > No functional change. (florian@)

  ~ ping6.c                               

  > Bring over 1.117 from ping:
  > ----------------------------------------------------------------
  > Only read time information from the received packet if it is big
  > enough.
  > OK deraadt@
  > ----------------------------------------------------------------
  > And with this summary() is in sync between ping and ping6. (florian@)

  ~ ping6.8                               

  > Wording improvment from jmc@ long time ago.
  > (When I tried to sync the -H flag to ping) (florian@)

sysctl

  ~ sysctl.c                              

  > for reporting changes, hex and decimal were swapped
  > noticed by pirofti (deraadt@)

== share ============================================================= 09/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/share

man

  ~ man1/help.1                           ~ man7/ports.7
  ~ man8/afterboot.8                      ~ man8/release.8

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

  ~ man9/Makefile                         

  > kettenis discovered a man page for a long deleted file. hash.h is gone.
  > (tedu@)

  ~ man9/hashinit.9                       

  > rm xr to hash.9 (tedu@)

  - man9/hash.9                           

  > forgot to actually remove file, thanks jmc (tedu@)

  ~ man9/hashinit.9                       

  > remove one more reference to the recently removed hash(9); (jmc@)

  ~ man4/tty.4                            

  > document new ioctls for verified auth (tedu@)

snmp

  ~ OPENBSD-BASE-MIB.txt                  ~ OPENBSD-MEM-MIB.txt
  ~ OPENBSD-SENSORS-MIB.txt               

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

== sys =============================================================== 10/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/sys

arch/alpha/alpha

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/amd64/amd64

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/arm/arm

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/hppa/hppa

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/i386/i386

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/landisk/landisk

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/loongson/loongson

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/luna88k/luna88k

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/macppc/macppc

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/octeon/octeon

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/sgi/sgi

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/socppc/socppc

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

arch/sparc64/sparc64

  ~ conf.c                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

crypto

  ~ cryptosoft.c                          

  > Remove variables 'm' and 'uio' that are only ever assigned to
  > (in swcr_authenc())
  > ok mikeb@, who pointed out that I'd missed uio (tom@)

ddb

  ~ db_trap.c                             

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

dev/acpi

  ~ acpicpu.c                             ~ dsdt.c
  ~ dsdt.h                                

  > Remove unused argument in aml_showvalue().
  > The second argument of aml_showvalue() was probably supposed to set
  > the verbosity level through dnprintf() but in fact it does nothing.
  > OK deraadt@ (pirofti@)

dev/ic

  ~ acx.c                                 

  > No need to set 'error' to 0 at the beginning of acx_encap(), as
  > we're only going to set it again 10 lines later.
  > ok mpi@ (tom@)

dev/pci

  ~ if_iwmvar.h                           

  > The struct iwm_rbuf definition, and the wantresp field in struct
  > iwm_rx_data aren't used anywhere and can be removed.
  > Patch by Imre Vadasz (stsp@)

  ~ if_iwm.c                              

  > The iwm_poll_bit() function in iwm(4) returns 1 on success, and 0 on
  > failure.
  > So instead of "if (ret < 0) {" we should check for "if (!ret) {".
  > Patch by Imre Vadasz (stsp@)

  ~ if_iwmreg.h                           

  > Although this doesn't seem to cause any issue at the moment, using an
  > enum type in a __packed struct should be avoided.
  > Patch by Imre Vadasz (stsp@)

  ~ if_iwm.c                              

  > Fix off-by-one error in the IWM_NUM_UCODE_TLV_CAPA range check.
  > Patch by Imre Vadasz (stsp@)

  ~ if_iwm.c                              

  > The policy field in struct iwm_time_event_cmd_v2 is just a 16bit integer,
  > so we should use htole16() when setting it, instead of htole32().
  > Patch by Imre Vadasz
  > ok natano@ (stsp@)

  ~ if_iwm.c                              

  > Enable SGI for iwm(4).
  > The maximum 11n data rate should go up from 65Mbit/s to 72Mbit/s.
  > ok sthen@ (stsp@)

  ~ if_iwn.c                              

  > Enable SGI for iwn(4).
  > The maximum 11n data rate should go up from 65Mbit/s to 72Mbit/s.
  > ok sthen@ (stsp@)

dev/usb

  ~ uhub.c                                ~ moscom.c
  ~ uark.c                                ~ uchcom.c
  ~ udcf.c                                ~ umbg.c
  ~ umct.c                                ~ uonerng.c
  ~ uplcom.c                              ~ uscom.c
  ~ uslcom.c                              ~ uts.c
  ~ uvisor.c                              ~ uvscom.c

  > Avoid calling usbd_set_config_index() in *_attach() and let the stack
  > do it instead.
  > If anything bad happen due to a malformed descriptor it makes no sense
  > to try to attach a driver, and bail before probing. (mpi@)

  ~ usb_subr.c                            

  > Prevent a NULL dereference, triggerable with a crafted configuration
  > descriptor with a bad type.
  > Found with umap2 and a facedancer21. (mpi@)

  ~ usb_subr.c                            

  > Do not free the configuration descriptor without setting ``dev->cdesc''
  > to NULL.
  > Prevent a use after free triggerable with invalid interface descriptor.
  > Found with umap2 and a facedancer21. (mpi@)

  ~ usb_subr.c                            

  > Cleanup usbd_fill_iface_data() to make it easier to check for bad
  > descriptors.
  > No functionnal change. (mpi@)

  ~ usb_subr.c                            

  > Pass M_ZERO when allocating memory for "struct usbd_endpoint".
  > These descriptors are filled with value parsed from untrusted USB
  > descriptors and we don't want to left memory unitialized if an error
  > occurs during the parsing. (mpi@)

isofs/cd9660

  ~ cd9660_vfsops.c                       

  > Variable 'imp' is set earlier in cd9660_mount() if it's needed (when
  > MNT_UPDATE is set in mnt_flag), so remove an unnecessary assignment later.
  > ok bluhm (tom@)

kern

  ~ subr_disk.c                           

  > Don't bother with 'ghpartnum' in gpt_chk_hdr(); it's not used
  > ok krw@ (tom@)

  + subr_tree.c                           

  > provide an implementation of red black trees using functions
  > the main goal of this change is to reduce the amount of code that
  > is generated as a result of using the macro implementation (RB_FOO)
  > of red black trees. on amd64 we should get a few dozen kilobytes
  > of code space back, and make red black trees more icache friendly
  > at the same time.
  > the new (RBT_FOO) implementation is modelled on the existing one,
  > but has some minor api variations. generally you can replace RB_
  > with RBT_ and get most of the way to converting code.
  > internally the red black tree functions all take an rb_type struct
  > that describes the layout of the object wired into a tree (ie, the
  > offset of the RBT_ENTRY inside a node), the comparison function,
  > and an optional augment function. because the functions are supposed
  > to be used for all types, they end up taking void * for the node
  > pointers instead of specific types. the tree is operated on as
  > pointers between the RBT_ENTRY structs instead of the nodes, which
  > gave me some type safety when implementing the code (cos casts
  > to/from void * dont ever fail, and continually calculating the
  > offset of the rb entry is annoying). RBT_ENTRYs are turned into
  > node pointers by prepending the offset stored in the rb_type struct
  > before theyre given to the comparison function or returned to the
  > caller.
  > to provide type safety on top of this, RBT_PROTOTYPE generates static
  > inline function wrappers that only take arguments of the right type,
  > and implicitly provide the rb_type struct argument to the actual
  > RBT functions. therefore the actual functions should never be called
  > directly, all calls should go through the RBT_ wrappers.
  > RBT_GENERATE is responsible for creating the rb_type struct used
  > by these wrappers. notably it also generates a wrapper around the
  > compare function so the user provided one must take the right types
  > instead of void *.
  > in terms of speed, this code is comparable to the macro implementation.
  > eg, insertion is very slightly slower in microbenchmarks, but
  > deletion appears to be significantly faster. this is possibly because
  > of the aggressive inlining ive done inside the delete codepaths.
  > the code is not yet wired into the kernel build.
  > it also needs to be said that there have been several attempts
  > before this to provide functions for at least some parts of the
  > kernels red black trees. that work made this a lot easier.
  > ok deraadt@ jung@ tedu@ (dlg@)

  ~ init_main.c                           

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

  ~ uipc_socket2.c                        

  > After allocating a single 64 KB mbuf cluster in sosend(), the sending
  > socket buffer had no space anymore.  The default mbuf space limit
  > was only 32 KB.  So no more data from user-land was accepted.  As
  > tcp_output() keeps the mbuf cluster for retransmits, it will be
  > freed only after all ACKs have been received.  That has killed our
  > TCP send performance totally.  To allow cycling through the mbufs
  > periodically, we need space for at least 3 of them.
  > Reported by Andreas Bartelt; testing with mikeb@; OK mikeb@ claudio@
  > (bluhm@)

  ~ kern_proc.c                           ~ kern_prot.c
  ~ tty_tty.c                             

  > add a concept of 'verified auth' to sessions. When set via ioctl,
  > the user and parent process are recorded. Later, this info may be tested
  > and used to bypass authorization requirements.
  > ie, doas won't ask for your password again.
  > Great idea from henning.
  > ok deraadt guenther henning (tedu@)

net

  ~ if_bridge.c                           ~ if_bridge.h
  ~ if_switch.c                           ~ switchofp.c

  > Add switch(4) support to ifconfig
  > ok deraadt@ yasuoka@ reyk@ henning@ (goda@)

  ~ pf_if.c                               ~ pf_ioctl.c
  ~ pf_norm.c                             ~ pf_osfp.c
  ~ pf_table.c                            

  > pool_setipl for pf bits
  > ok phessler@ henning@ (dlg@)

  ~ pf_osfp.c                             

  > provide a pool_setipl so tcpdump can compile this file
  > spotted by deraadt@ (dlg@)

netinet

  ~ ipsec_input.c                         ~ ip_esp.h

  > Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add
  > the relevant counters.
  > Ok mikeb@ (vgross@)

netinet6

  ~ nd6_rtr.c                             

  > Go through the set function like normal people; no functional change.
  > OK benno@ (florian@)

  ~ nd6_rtr.c                             

  > Consider when a prefix expires when sending solicitations instead of
  > blindly always sending one every 60 seconds.
  > repeated prodding & input naddy
  > input & OK vgross (florian@)

  ~ in6_src.c                             

  > in6_selectroute should never get a valid struct route * filled with
  > something
  > else than AF_INET6.
  > Ok florian@ (vgross@)

sys

  ~ sockio.h                              

  > Add switch(4) support to ifconfig
  > ok deraadt@ yasuoka@ reyk@ henning@ (goda@)

  ~ tree.h                                

  > provide an implementation of red black trees using functions
  > the main goal of this change is to reduce the amount of code that
  > is generated as a result of using the macro implementation (RB_FOO)
  > of red black trees. on amd64 we should get a few dozen kilobytes
  > of code space back, and make red black trees more icache friendly
  > at the same time.
  > the new (RBT_FOO) implementation is modelled on the existing one,
  > but has some minor api variations. generally you can replace RB_
  > with RBT_ and get most of the way to converting code.
  > internally the red black tree functions all take an rb_type struct
  > that describes the layout of the object wired into a tree (ie, the
  > offset of the RBT_ENTRY inside a node), the comparison function,
  > and an optional augment function. because the functions are supposed
  > to be used for all types, they end up taking void * for the node
  > pointers instead of specific types. the tree is operated on as
  > pointers between the RBT_ENTRY structs instead of the nodes, which
  > gave me some type safety when implementing the code (cos casts
  > to/from void * dont ever fail, and continually calculating the
  > offset of the rb entry is annoying). RBT_ENTRYs are turned into
  > node pointers by prepending the offset stored in the rb_type struct
  > before theyre given to the comparison function or returned to the
  > caller.
  > to provide type safety on top of this, RBT_PROTOTYPE generates static
  > inline function wrappers that only take arguments of the right type,
  > and implicitly provide the rb_type struct argument to the actual
  > RBT functions. therefore the actual functions should never be called
  > directly, all calls should go through the RBT_ wrappers.
  > RBT_GENERATE is responsible for creating the rb_type struct used
  > by these wrappers. notably it also generates a wrapper around the
  > compare function so the user provided one must take the right types
  > instead of void *.
  > in terms of speed, this code is comparable to the macro implementation.
  > eg, insertion is very slightly slower in microbenchmarks, but
  > deletion appears to be significantly faster. this is possibly because
  > of the aggressive inlining ive done inside the delete codepaths.
  > the code is not yet wired into the kernel build.
  > it also needs to be said that there have been several attempts
  > before this to provide functions for at least some parts of the
  > kernels red black trees. that work made this a lot easier.
  > ok deraadt@ jung@ tedu@ (dlg@)

  ~ conf.h                                

  > Add switch(4) cdev entry
  > ok deraadt@ yasuoka@ reyk@ (goda@)

  ~ proc.h                                ~ ttycom.h

  > add a concept of 'verified auth' to sessions. When set via ioctl,
  > the user and parent process are recorded. Later, this info may be tested
  > and used to bypass authorization requirements.
  > ie, doas won't ask for your password again.
  > Great idea from henning.
  > ok deraadt guenther henning (tedu@)

uvm

  ~ uvm_addr.c                            

  > Mask out lower bits of randomly selected address
  > Fixes uvm pivots bug that would create non-page aligned addresses.
  > This fix is in code that's not yet enabled. (stefan@)

== usr.bin =========================================================== 11/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.bin

doas

  ~ doas.1                                ~ doas.c
  ~ doas.conf.5                           ~ doas.h
  ~ parse.y                               

  > add support for the verified auth ioctls using 'persist' rules.
  > ok deraadt henning (tedu@)

  ~ doas.1                                

  > clarify that -L will exit without running a command. (tedu@)

encrypt

  ~ encrypt.c                             

  > convert getpass to readpassphrase. from Dimitris Papastamos (tedu@)

  ~ encrypt.c                             

  > _PASSWORD_LEN is length that comes out of crypt(), not a meaningful
  > length for user entered passwords. And the +1 is just superstitious
  > nonsense inherited from getpass() guts.
  > Switch to a pleasing fixed size of 1024.
  > ok millert (tedu@)

jot

  ~ jot.c                                 

  > style cleanup: sort headers; group and sort variables; no parens for
  > return; sort getopt string and corresponding switch; and some more
  > tedious stuff
  > ok martijn (tb@)

mandoc

  ~ mandocdb.c                            

  > When "makewhatis -d" tries to add to a database that doesn't (yet) exist,
  > silently create it from scratch instead of printing a warning.
  > The annoying warning message was reported by ajacoutot@, and espie@
  > convincingly argues that a non-existing database can be considered
  > equivalent to an empty one. (schwarze@)

netstat

  ~ inet.c                                

  > Drop non-encapulated ESP packets using a UDP-encapsulating TDB, and add
  > the relevant counters.
  > Ok mikeb@ (vgross@)

openssl

  ~ openssl.1                             

  > shorten s_server; (jmc@)

passwd

  ~ local_passwd.c                        

  > make sure to explicitly clear memory that is used for password input.
  > OK tedu@ (gsoares@)

  ~ local_passwd.c                        

  > _PASSWORD_LEN is length that comes out of crypt(), not a meaningful
  > length for user entered passwords. And the +1 is just superstitious
  > nonsense inherited from getpass() guts.
  > Switch to a pleasing fixed size of 1024.
  > ok millert (tedu@)

patch

  ~ pch.c                                 

  > If reading fails, do not go into infinite loop asking for a filename
  > Happens in bulf build where no tty is available.
  > ok sthen@ naddy@ $(jot -b yes 1000) landry@ (otto@)

  ~ ed.c                                  

  > Fix 'c'hange command handling if last line of a file is removed.
  > If the last line of a file is removed, the line cache is erroneously
  > considered empty, which means that changed lines are added at the top.
  > spotted by and okay otto@ (tobias@)

signify

  ~ signify.c                             

  > split the sign() function into two, with a pure memory core made
  > available as a separate function to make it easier to reuse in other code.
  > (tedu@)

  ~ signify.c                             

  > move more code into createsig. callers just pass seckey filename. (tedu@)

  ~ Makefile                              ~ signify.c
  + signify.h                             + zsig.c

  > add a new option (-z) for signing gzip archives.
  > - simple barebones gzip header parsing
  > - signature is outside of the archive
  > - checksums for blocks of 64K
  > - verify stuff then pass it to the pipeline
  > lots of inputs by tedu@ and deraadt@
  > okay tedu@ (espie@)

  ~ zsig.c                                

  > duplicate var (espie@)

  ~ signify.1                             ~ signify.c

  > document the new stuff, usage nits.
  > some input by jmc@, to be polished later
  > "get it in now" tedu@ deraadt@ (espie@)

  ~ signify.1                             

  > more jmc tweaks (espie@)

  ~ signify.1                             

  > finish the sentence; (jmc@)

  ~ signify.1                             

  > space out the example (tedu@)

  ~ signify.c                             

  > -e and -z cannot be combined (tedu@)

  ~ signify.c                             

  > combine the pledge switch with the execution switch. no changes yet,
  > but we can do a little better in some cases. (tedu@)

  ~ signify.c                             

  > the old check for when verify needed to create files (affecting pledge)
  > was slightly wrong, but it didn't matter. new gzip mode however falls
  > into the gap. the zsig code will default to stdout, therefore it needs
  > much fewer privileges if msgfile is not specified. (tedu@)

  ~ signify.c                             

  > use err() instead of errx when an errno is set (tedu@)

  ~ zsig.c                                

  > replace exit() with err() and errx() so user knows what happened (tedu@)

  ~ zsig.c                                

  > style polishing (tedu@)

tmux

  ~ grid-view.c                           ~ grid.c
  ~ screen-write.c                        ~ screen.c
  ~ tmux.h                                

  > Remember the number of lines scrolled into the history (versus cleared
  > into the history) and when resizing only use scrolled lines and not
  > cleared lines (which are probably not intended to reappear). From
  > Chaoren Lin. (nicm@)

vi

  ~ ex/ex_subst.c                         

  > Fix the begin of word issue in vi(1).
  > Similar fix went in sed and ed.
  > Feedback and OK schwarze@ (martijn@)

== usr.sbin ========================================================== 12/12 ==

  http://cvsweb.openbsd.org/cgi-bin/cvsweb/src/usr.sbin

bgpd

  ~ Makefile                              ~ bgpd.c
  ~ bgpd.h                                ~ log.c
  ~ log.h                                 ~ rde.c
  ~ session.c                             

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

  + logmsg.c                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

dvmrpctl

  ~ Makefile                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

dvmrpd

  ~ dvmrpd.c                              ~ dvmrpe.c
  ~ rde.c                                 

  > Don't fatal if the imsg pipe is closed, this is often triggered in the
  > parent and hides the real cause of the termination.
  > Pulled from ospfd. Original author: claudio@
  > ok rzalamena@ benno@ claudio@ (renato@)

  ~ dvmrpd.c                              ~ dvmrpe.c
  ~ rde.c                                 

  > Close connections when msgbuf_write() returns 0.
  > Pulled from ospfd. Original author: claudio@
  > ok rzalamena@ benno@ claudio@ (renato@)

  ~ dvmrpd.c                              ~ dvmrpe.c
  ~ rde.c                                 

  > Simplify shutdown process.
  > On shutdown, there's no need to use kill(2) to kill the child
  > processes. Just closing the IPC sockets will make the children receive
  > an EOF, break out from the event loop and then exit.
  > Tha advantages of this "pipe teardown" are:
  > * simpler code;
  > * no need to pledge "proc" in the parent process;
  > * removal of a (hard to trigger) PID reuse race condition.
  > "reads good" claudio@ (renato@)

  ~ Makefile                              ~ dvmrpd.c
  ~ dvmrpd.h                              ~ dvmrpe.c
  ~ log.c                                 ~ log.h
  ~ rde.c                                 + logmsg.c

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

eigrpctl

  ~ Makefile                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

eigrpd

  ~ eigrpd.c                              ~ eigrpe.c
  ~ rde.c                                 

  > Fix broken pipe teardown.
  > * Add missing close() calls to actually close the pipes, calling just
  > msgbuf_clean() is not enough;
  > * Bring back some NOTREACHED lint comments. style(9) says they can be
  > removed but in some cases they are useful to humans too;
  > * Add __dead to the shutdown functions;
  > * Some other minor changes to make eigrpd(8) more similar to the other
  > routing daemons. (renato@)

  ~ control.c                             ~ control.h
  ~ eigrp.h                               ~ eigrpd.c
  ~ eigrpd.h                              ~ eigrpe.c
  ~ eigrpe.h                              ~ hello.c
  ~ interface.c                           ~ kroute.c
  ~ log.c                                 ~ neighbor.c
  ~ packet.c                              ~ parse.y
  ~ printconf.c                           ~ query.c
  ~ rde.c                                 ~ rde.h
  ~ rde_dual.c                            ~ reply.c
  ~ rtp.c                                 ~ tlv.c
  ~ update.c                              ~ util.c

  > Remove superfluous includes and follow style(9).
  > ok claudio@ benno@ (renato@)

  ~ eigrpe.c                              

  > Pledge earlier on eigrpe.
  > This is for consistency with the other routing daemons.
  > ok claudio@ "earlier is better" benno@ (renato@)

  ~ eigrp.h                               ~ eigrpd.h
  ~ eigrpe.c                              ~ interface.c
  ~ packet.c                              

  > Simplify handling of multicast addresses.
  > During the initialization of the eigrpe process, use inet_pton() to
  > store the EIGRP multicast addresses in two global variables:
  > * global.mcast_addr_v4 (in_addr);
  > * global.mcast_addr_v6 (in6_addr).
  > This way we don't need to create temporary in_addr/in6_addr variables
  > everytime we need to use these multicast addresses for something.
  > "I like this" claudio@ ok benno@ (renato@)

  ~ eigrpd.h                              ~ eigrpe.c
  ~ eigrpe.h                              ~ packet.c
  ~ util.c                                

  > Merge the recv_packet_v[46] functions into one.
  > This reduces some code duplication and makes it easier to see the
  > difference between the IPv4 and IPv6 raw sockets API.
  > tweak + ok claudio@, ok benno@ (renato@)

  ~ eigrpe.c                              ~ interface.c
  ~ neighbor.c                            ~ parse.y
  ~ rde.c                                 

  > Use static local variables instead of global variables whenever possible.
  > Also, there's no need to zero initialize global and static variables,
  > that's done automatically by the compiler.
  > ok claudio@ benno@ (renato@)

  ~ control.c                             ~ control.h
  ~ eigrpd.c                              ~ eigrpd.h
  ~ eigrpe.c                              ~ eigrpe.h
  ~ interface.c                           ~ kroute.c
  ~ log.h                                 ~ neighbor.c
  ~ packet.c                              ~ parse.y
  ~ printconf.c                           ~ query.c
  ~ rde.c                                 ~ rde.h
  ~ rde_dual.c                            ~ reply.c
  ~ rtp.c                                 ~ update.c

  > Make functions and variables static whenever possible.
  > style(9) says:
  > "Function prototypes for private functions (i.e., functions not used
  > elsewhere) go at the top of the first source module. In userland,
  > functions local to one source module should be declared 'static'".
  > The benefits of doing so include:
  > * clean up of the eigrpd global namespace;
  > * improved readability;
  > * more hints to the compiler/linker to generate more efficient code.
  > Additional changes:
  > * Declare all extern variables in header files;
  > * Clean up the indentation of all function prototypes and global
  > variables.
  > ok claudio@ benno@ (renato@)

  ~ eigrpd.h                              ~ eigrpe.c
  ~ eigrpe.h                              ~ log.c
  ~ query.c                               ~ rde.c
  ~ rde.h                                 ~ reply.c
  ~ tlv.c                                 ~ update.c

  > Minor tweaks (renato@)

  ~ Makefile                              ~ eigrpd.c
  ~ eigrpd.h                              ~ eigrpe.c
  ~ log.c                                 ~ log.h
  + logmsg.c                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

httpd

  ~ httpd.c                               ~ httpd.h
  ~ proc.c                                

  > proc.c tweaks: Rename proc_listento() to proc_accept() as it is the
  > receiving side of proc_connect().  Move some code from main into
  > proc_init(), the function is now called by parent and children, not
  > just the parent and it is less copy + paste for other daemons.
  > OK florian@ (reyk@)

ifstated

  ~ log.c                                 

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

iscsid

  ~ Makefile                              ~ iscsid.h
  ~ log.c                                 ~ log.h
  + logmsg.c                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@ (benno@)

ldpd

  ~ lde.c                                 ~ ldpd.c
  ~ ldpe.c                                

  > Simplify shutdown process.
  > On shutdown, there's no need to use kill(2) to kill the child
  > processes. Just closing the IPC sockets will make the children receive
  > an EOF, break out from the event loop and then exit.
  > Tha advantages of this "pipe teardown" are:
  > * simpler code;
  > * no need to pledge "proc" in the parent process;
  > * removal of a (hard to trigger) PID reuse race condition.
  > ok claudio@ (renato@)

  ~ lde.c                                 

  > Reevaluate received mappings upon receipt of address message.
  > If a neighbor was a nexthop for a given set of prefixes but it's not
  > anymore, then we should uninstall the associated label mappings (if any)
  > from the kernel.  The same applies for the other way round (neighbor
  > wasn't a nexthop for a given set of prefixes but now is).
  > This issue is only evident when we have multiple links between a pair
  > of LSRs. Generally, when a link is shut down, the whole LDP is torn down
  > and all label mappings uninstalled automatically.
  > ok claudio@ (renato@)

  ~ labelmapping.c                        ~ log.c
  ~ log.h                                 ~ notification.c

  > Improve logging of sent and received messages.
  > * Standardize the logging format of sent and received messages:
  > "msg-[in|out]: message type: lsr-id A.B.C.D [additional info]";
  > * Log sent label messages as well, not only the received ones;
  > * Move the logging of sent notification messages from
  > send_notification_nbr() to send_notification_full(), this way notification
  > triggered by the lde process are logged as well;
  > * Minor clean-up. (renato@)

  ~ lde.c                                 ~ lde.h
  ~ ldpe.c                                ~ ldpe.h

  > lde() and ldpe() should return void.
  > Remove these leftovers from the pre-fork+exec era.
  > Spotted by and ok rzalamena@ ok claudio@ (renato@)

  ~ labelmapping.c                        

  > Fix small memleak on error path. (renato@)

ospf6ctl

  ~ Makefile                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

ospf6d

  ~ Makefile                              ~ log.c
  ~ log.h                                 ~ ospf6d.c
  ~ ospf6d.h                              ~ ospfe.c
  ~ rde.c                                 

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

  + logmsg.c                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

ospfctl

  ~ Makefile                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

ospfd

  ~ Makefile                              ~ log.c
  ~ log.h                                 ~ ospfd.c
  ~ ospfd.h                               ~ ospfe.c
  ~ rde.c                                 

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

  + logmsg.c                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

relayd

  ~ ca.c                                  ~ hce.c
  ~ pfe.c                                 ~ proc.c
  ~ relay.c                               ~ relayd.c
  ~ relayd.h                              

  > Terminate relayd using the socket status instead of watching SIGCHLD
  > or killing child processes. - Based on rzalamena@'s diff for httpd.
  > OK deraadt@ rzalamena@ (reyk@)

  ~ ca.c                                  ~ control.c
  ~ pfe.c                                 ~ proc.c
  ~ relay.c                               ~ relayd.c
  ~ relayd.h                              

  > As done in httpd, remove ps_ninstances and p_instance.
  > OK benno@ rzalamena@ (reyk@)

  ~ proc.c                                

  > style nit as done in httpd (reyk@)

  ~ config.c                              

  > As done in httpd, (re-)initialize ps_what in all processes.  This is
  > no functional change at this point. (reyk@)

  ~ ca.c                                  ~ relay.c
  ~ relay_udp.c                           

  > proc_id has been replaced by ps->ps_instance.
  > OK claudio@ (reyk@)

  ~ ca.c                                  ~ check_icmp.c
  ~ check_script.c                        ~ config.c
  ~ hce.c                                 ~ parse.y
  ~ pfe.c                                 ~ pfe_filter.c
  ~ pfe_route.c                           ~ relay.c
  ~ relayd.c                              ~ relayd.h
  ~ snmp.c                                

  > Split "struct relayd" into two structs: "struct relayd" and "struct
  > relayd_config".  This way we can send all the relevant global
  > configuration to the children, not just the flags and the opts.
  > With input from and
  > OK claudio@ benno@ (reyk@)

  ~ parse.y                               ~ pfe.c
  ~ relayd.h                              ~ snmp.c

  > Move snmp options into struct relayd_config and delay start of the
  > snmp subsystem until the configuration is done.
  > OK benno@ claudio@ (reyk@)

ripctl

  ~ Makefile                              

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

ripd

  ~ Makefile                              ~ log.c
  ~ log.h                                 ~ rde.c
  ~ ripd.c                                ~ ripd.h
  ~ ripe.c                                + logmsg.c

  > work on making log.c similar in all daemons:
  > move daemon-local functions into new logmsg.c, and reduce
  > the (mostly whitespace) differences so that log.c's can be diffed easily.
  > ok claudio@, feedback from henning@, deraadt@, reyk@ (benno@)

smtpd

  ~ ssl.c                                 

  > turn server preference for ciphers on by default
  > ok jsing@ (gilles@)

  ~ mproc.c                               

  > use imsg_read_nofd() implementation from bgpd.
  > let the caller handle EAGAIN.
  > ok gilles@ (eric@)

snmpd

  ~ control.c                             

  > use imsg_read_nofd() implementation from bgpd.
  > let the caller handle EAGAIN.
  > ok reyk@ gilles@ (eric@)

sysmerge

  ~ sysmerge.8                            

  > move links from http to https://www.openbsd.org/
  > ok beck (tb@)

tcpdump

  ~ print-802_11.c                        

  > Make tcpdump print details about association requests in verbose mode.
  > Refactor such that we can share some of the code for beacon printing.
  > ok sthen@ (stsp@)

vmd

  ~ vmd.h                                 ~ vmm.c

  > Move event handling to separate thread
  > That allows the main thread to handle the termination
  > of a VM on reboot/shutdown or normal exit. The way it works
  > is that VCPUs that terminate for some reason communicate this
  > to a main thread that takes care of shutdown.
  > ok mlarkin@ (stefan@)

  ~ virtio.c                              ~ virtio.h

  > Process incoming host->guest packets asynchronously to running VCPU
  > This registers a handler with libevent that is called on incoming packets
  > for the guest. If they cannot be handled immediately (because the virtq is
  > full), make sure they are handled on VCPU exits.
  > ok mlarkin@ (stefan@)

  ~ ns8250.c                              ~ ns8250.h
  ~ vmm.c                                 

  > Process incoming com data asynchronously to running VCPU
  > This registers a handler with libevent that is triggered on incoming
  > data on the com port.
  > ok mlarkin@ (stefan@)

===============================================================================
_______________________________________________
odc mailing list
[email protected]
http://www.squish.net/mailman/listinfo/odc

Reply via email to