Remove $FreeBSD$: one-line sh pattern

Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/

Merge OpenSSL 3.0.9

Migrate to OpenSSL 3.0 in advance of FreeBSD 14.0. OpenSSL 1.1.1 (the
version we were previously using) will be EOL as of 2023-09-11.

Most of the base system has already been updated for a seamless switch
to OpenSSL 3.0. For many components we've added
`-DOPENSSL_API_COMPAT=0x10100000L` to CFLAGS to specify the API version,
which avoids deprecation warnings from OpenSSL 3.0. Changes have also
been made to avoid OpenSSL APIs that were already deprecated in OpenSSL
1.1.1. The process of updating to contemporary APIs can continue after
this merge.

Additional changes are still required for libarchive and Kerberos-
related libraries or tools; workarounds will immediately follow this
commit. Fixes are in progress in the upstream projects and will be
incorporated when those are next updated.

There are some performance regressions in benchmarks (certain tests in
`openssl speed`) and in some OpenSSL consumers in ports (e.g. haproxy).
Investigation will continue for these.

Netflix's testing showed no functional regression and a rather small,
albeit statistically significant, increase in CPU consumption with
OpenSSL 3.0.

Thanks to ngie@ and des@ for updating base system components, to
antoine@ and bofh@ for ports exp-runs and port fixes/workarounds, and to
Netflix and everyone who tested prior to commit or contributed to this
update in other ways.

PR: 271615
PR: 271656 [exp-run]
Relnotes: Yes
Sponsored by: The FreeBSD Foundation

pkgbase: Put openssl in its own package

This is useful for upgrade and also to make tiny jail so they won't
depend on FreeBSD-utilities (where openssl was packaged before).

MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D30081

MFH r338661 through r339200.

Sponsored by: The FreeBSD Foundation

Remove pthread from LIBADD for openssl(1).

libcrypto is linked with pthread since r338816.

Move the openssl.cnf install to secure/usr.bin/openssl/

This leverages CONFS to do the install

Approved by: re (pkgbase, blanket), bapt (mentor)
Differential Revision: https://reviews.freebsd.org/D17245

Build openssl(1).

Clean up OpenSSL makefiles.

Convert to LIBADD
Reduce overlinking

Merge OpenSSL 1.0.1c.

Approved by: benl (maintainer)

Update build infrastructure for OpenSSL 0.9.8k.

Upgrade to OpenSSL 0.9.8b.

Update OpenSSL 0.9.7d -> 0.9.7e.

Handle includes the normal way.

Reviewed by: markm
Approved by: nectar

Install the OpenSSL man pages in /usr/share/openssl/man
and remove the WANT_OPENSSL_MANPAGES knob.

Update for OpenSSL 0.9.7. No assembler code at the moment. This
will follow.

Remove myself as maintainer of openssl; I no longer have enough time to
devote to it.

Build using pregenerated manpages; don't use perl to translate .pod's.
The translated .pod's have already been committed.

Added missing DPADD and CLEANFILES.

secure/ build fixes:

- TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a
in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there.

- SSHDIR (formerly SSHSRC) is now shared between all SSH modules.
New LIBSSH is introduced for libssh.a (an internal static lib).
Previously, build without prior `obj' was broken; SSH modules
always looked for libssh.a in ${.OBJDIR}. Also, the dependancies
on the libssh.a were missing.

- libtelnet/ did not install the crypto version of telnet.h into
/usr/include/arpa.

- Removed BINOWN, BINMODE, BINDIR and SRCS with default values.

Reviewed by: markm

- MAN[1-9] -> MAN.

Update for OpenSSL 0.9.6

Install the openssl(1) manpage with an MLINK from ssl(8) to at least put
something in the location where OpenSSH likes to point.

MFI. This is a documentation-only, diffreducing patch, that if
invoked will cause breakage. US Users - DO NOT try to turn on
IDEA - the sources are not included.

Update for OpenSSL 0.9.5a and clean up a bit.

Merge from internat.freebsd.org repo, minus change to rsa_eay.c (missing)

Reorganize and unify libcrypto's interface so that the RSA implementation
is chosen at runtime via dlopen().

This is a checkpoint and may require more tweaks still.

Merge from internat.freebsd.org; deal with -DRSAref the same way as
libcrypto - not that it means much on the US code tree.

Don't pull in libRSAglue for the rsaref case. Since this is linked
dynamically by default, we use the dlopen() calls to load librsaref.so
on US code trees.

Diff reducer. Comes from Internat.

Remove useless whitespace.

Part of big commit OK'ed by: JKH

Back out the previous commit - it broke world and was not approved.
I don't know what I was thinking committing without approval - sorry.

Link dynamically, not statically.

Don't search for libraries in ${LOCALBASE}. This should fix the problems
people were seeing with conflicts with the openssl port.

The wrong version of the file was committed previously which explains the
problems seen here.

Add MAINTAINER tag so people don't feel the need to randomly frob with this.

Build infrastructure for OpenSSL

pkgbase: Put openssl in its own package

This is useful for upgrade and also to make tiny jail so they won't
depend on FreeBSD-utilities (where openssl was packaged before).

MFC after: 1 month
Differential Revision: https://reviews.freebsd.org/D30081

Remove pthread from LIBADD for openssl(1).

libcrypto is linked with pthread since r338816.

Move the openssl.cnf install to secure/usr.bin/openssl/

This leverages CONFS to do the install

Approved by: re (pkgbase, blanket), bapt (mentor)
Differential Revision: https://reviews.freebsd.org/D17245

Build openssl(1).

Clean up OpenSSL makefiles.

Convert to LIBADD
Reduce overlinking

A new jail(8) with a configuration file, to replace the work currently done
by /etc/rc.d/jail.

Create the altix project branch. The altix project will add support
for the SGI Altix 350 to FreeBSD/ia64. The hardware used for porting
is a two-module system, consisting of a base compute module and a
CPU expansion module. SGI's NUMAFlex architecture can be an excellent
platform to test CPU affinity and NUMA-aware features in FreeBSD.

Update build infrastructure for OpenSSL 0.9.8k.

- Import the HEAD csup code which is the basis for the cvsmode work.

Upgrade to OpenSSL 0.9.8b.

Update OpenSSL 0.9.7d -> 0.9.7e.

Handle includes the normal way.

Reviewed by: markm
Approved by: nectar

Install the OpenSSL man pages in /usr/share/openssl/man
and remove the WANT_OPENSSL_MANPAGES knob.

Update for OpenSSL 0.9.7. No assembler code at the moment. This
will follow.

Remove myself as maintainer of openssl; I no longer have enough time to
devote to it.

Build using pregenerated manpages; don't use perl to translate .pod's.
The translated .pod's have already been committed.

Added missing DPADD and CLEANFILES.

secure/ build fixes:

- TELNETOBJDIR is gone. `buildworld' already installs libtelnet.a
in ${WORLDTMP}/usr/lib, and we have LIBRARY_PATH pointing there.

- SSHDIR (formerly SSHSRC) is now shared between all SSH modules.
New LIBSSH is introduced for libssh.a (an internal static lib).
Previously, build without prior `obj' was broken; SSH modules
always looked for libssh.a in ${.OBJDIR}. Also, the dependancies
on the libssh.a were missing.

- libtelnet/ did not install the crypto version of telnet.h into
/usr/include/arpa.

- Removed BINOWN, BINMODE, BINDIR and SRCS with default values.

Reviewed by: markm

- MAN[1-9] -> MAN.

Update for OpenSSL 0.9.6

Install the openssl(1) manpage with an MLINK from ssl(8) to at least put
something in the location where OpenSSH likes to point.

MFI. This is a documentation-only, diffreducing patch, that if
invoked will cause breakage. US Users - DO NOT try to turn on
IDEA - the sources are not included.

Update for OpenSSL 0.9.5a and clean up a bit.

Merge from internat.freebsd.org repo, minus change to rsa_eay.c (missing)

Reorganize and unify libcrypto's interface so that the RSA implementation
is chosen at runtime via dlopen().

This is a checkpoint and may require more tweaks still.

Merge from internat.freebsd.org; deal with -DRSAref the same way as
libcrypto - not that it means much on the US code tree.

Don't pull in libRSAglue for the rsaref case. Since this is linked
dynamically by default, we use the dlopen() calls to load librsaref.so
on US code trees.

Diff reducer. Comes from Internat.

Remove useless whitespace.

Part of big commit OK'ed by: JKH

Back out the previous commit - it broke world and was not approved.
I don't know what I was thinking committing without approval - sorry.

Link dynamically, not statically.

Don't search for libraries in ${LOCALBASE}. This should fix the problems
people were seeing with conflicts with the openssl port.

The wrong version of the file was committed previously which explains the
problems seen here.

Add MAINTAINER tag so people don't feel the need to randomly frob with this.

Build infrastructure for OpenSSL