Fix multiple OpenSSL vulnerabilitites.

Approved by: so
Security: FreeBSD-SA-16:26.openssl

Fix multiple OpenSSL vulnerabilitites.

Approved by: so
Security: FreeBSD-SA-16:26.openssl

- Copy stable/10@296371 to releng/10.3 in preparation for 10.3-RC1
builds.
- Update newvers.sh to reflect RC1.
- Update __FreeBSD_version to reflect 10.3.
- Update default pkg(8) configuration to use the quarterly branch.

Approved by: re (implicit)

Merge OpenSSL 1.0.1r.

Relnotes: yes

Merge OpenSSL 1.0.1q.

MFC: r285329

Merge OpenSSL 1.0.1p.

Approved by: re (gjb)
Relnotes: yes

MFC: r284283

Merge OpenSSL 1.0.1n.

MFC: r280297

Merge OpenSSL 1.0.1m.

Relnotes: yes

MFC: r276861, r276863

Merge OpenSSL 1.0.1k.

MFC: r273144, r273146

Merge OpenSSL 1.0.1j.

Relnotes: yes

MFC: r269682

Merge OpenSSL 1.0.1i.

MFC: r267256

Merge OpenSSL 1.0.1h.

Approved by: so (delphij)

Fix OpenSSL multiple vulnerabilities.

Security: CVE-2014-0195, CVE-2014-0221, CVE-2014-0224,
CVE-2014-3470
Security: SA-14:14.openssl

MFC: r261037, r264278

Merge OpenSSL 1.0.1f and 1.0.1g.

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Merge OpenSSL 1.0.1e.

Approved by: secteam (simon), benl (silence)

Merge OpenSSL 1.0.1c.

Approved by: benl (maintainer)

Merge OpenSSL 0.9.8x.

Reviewed by: stas
Approved by: benl (maintainer)
MFC after: 3 days

Update the previous openssl fix. [12:01]

Fix a bug in crypt(3) ignoring characters of a passphrase. [12:02]

Security: FreeBSD-SA-12:01.openssl (revised)
Security: FreeBSD-SA-12:02.crypt
Approved by: so (bz, simon)

Fix multiple OpenSSL vulnerabilities.

Security: CVE-2011-4576, CVE-2011-4619, CVE-2011-4109
Security: CVE-2012-0884, CVE-2012-2110
Security: FreeBSD-SA-12:01.openssl
Approved by: so (bz,simon)

Fix SSL memory handlig for (EC)DH cipher suites, in particular for
multi-threaded use of ECDH.

Security: CVE-2011-3210
Reviewed by: stas
Obtained from: OpenSSL CVS
Approved by: re (kib)

Merge OpenSSL 0.9.8q into head.

Security: CVE-2010-4180
Security: http://www.openssl.org/news/secadv_20101202.txt
MFC after: 3 days

Merge OpenSSL 0.9.8m into head.

This also "reverts" some FreeBSD local changes so we should now
be back to using entirely stock OpenSSL. The local changes were
simple $FreeBSD$ lines additions, which were required in the CVS
days, and the patch for FreeBSD-SA-09:15.ssl which has been
superseded with OpenSSL 0.9.8m's RFC5746 'TLS renegotiation
extension' support.

MFC after: 3 weeks

Disable SSL renegotiation in order to protect against a serious
protocol flaw. [09:15]

Correctly handle failures from unsetenv resulting from a corrupt
environment in rtld-elf. [09:16]

Fix permissions in freebsd-update in order to prevent leakage of
sensitive files. [09:17]

Approved by: so (cperciva)
Security: FreeBSD-SA-09:15.ssl
Security: FreeBSD-SA-09:16.rtld
Security: FreeBSD-SA-09:17.freebsd-udpate

Merge OpenSSL 0.9.8k into head.

Approved by: re

Prevent cross-site forgery attacks on lukemftpd(8) due to splitting
long commands into multiple requests. [09:01]

Fix incorrect OpenSSL checks for malformed signatures due to invalid
check of return value from EVP_VerifyFinal(), DSA_verify, and
DSA_do_verify. [09:02]

Security: FreeBSD-SA-09:01.lukemftpd
Security: FreeBSD-SA-09:02.openssl
Obtained from: NetBSD [SA-09:01]
Obtained from: OpenSSL Project [SA-09:02]
Approved by: so (simon)

This commit was generated by cvs2svn to compensate for changes in r167612,
which included commits to RCS files with non-trunk default branches.

Vendor import of OpenSSL 0.9.8e.

Vendor import of OpenSSL 0.9.8d.

Vendor import of OpenSSL 0.9.8b

Vendor import of OpenSSL 0.9.7e.

Vendor import of OpenSSL 0.9.7d.

Vendor import of OpenSSL 0.9.7c

Import of PKCS #1 security fix.
http://www.openssl.org/news/secadv_20030319.txt

Vendor import of OpenSSL release 0.9.7. This release includes
support for AES and OpenBSD's hardware crypto.

Import of OpenSSL 0.9.6f.

Import of OpenSSL 0.9.6e.

Import of OpenSSL 0.9.6d.

Initial import of OpenSSL 0.9.6c

Initial import of OpenSSL 0.9.6b

Import of OpenSSL 0.9.6-STABLE snapshot dated 2001-02-10

Initial import of OpenSSL 0.9.6

Initial import of OpenSSL 0.9.5a

Initial import of OpenSSL 0.9.4, sans IDEA and RSA code for patent
infringement reasons.