General changes:
- apply a similar 'style' as used in the installer scripts
- improve comments to be more to the point, remove where code is obvious
- document usage of functions if they have arguments
- rename variables where it improves readability
- replace really old-school shell code with more contemporary idioms
Changes to stripcom():
- skip empty files (eleminates tests for this before calling stripcom)
- remove {} around the while-loop, feed file directly
- instead of continue if empty and then print, print only if non-empty
- use the safer "print -r --" instead of plain "echo"
- quote "$_line" on output to prevent globbing
Changes to update_limit():
- use {,-cur,-max} instead of "" -cur -max
- eleminate if-block with reverse test and continue
OK halex@ krw@

ok deraadt@

to hook the rc script and modify etc/rc.conf to make it disable by
default.  Also add an entry for /etc/radiusd.conf to etc/changelist
and etc/mtree/special.
ok deraadt

miniroot to cover all current wandboard variations.
Unlike the other imx u-boot configs the wandboard config doesn't search
for ext2 only a fat fs.
Grow the ramdisk size to fit the extra u-boot files.
From Roman Kravchuk.

nt# * ns# * nc# == pc# == pa#
which makes for a better disklabel via getdiskbyname().
ok deraadt@

From Denis Fondras, ok deraadt

a FFS block), not 4480 (the size of the partition).
ok millert@

99% of the world calls it.
allow just "bcrypt" without params to mean auto-tune ("bcrypt,a").
default remains 8 rounds (for now)
ok deraadt

ok deraadt

ok sthen@

server and radiusctl(8) is to control the server.  radiusd(8) currently
supports bsdauth and radius (upstream radius servers) as authentication
backends.
fixes from jsg blambert
ok deraadt

ok deraadt

able to use ksh syntax within these scripts. This way init doesn't
need to be changed, which starts /etc/rc using /bin/sh and people
can still use "sh /etc/netstart ifname".
Idea from and OK halex@
OK deraadt@ krw@ guenther@

any of the other interfaces.
OK deraadt, phessler, benno

OpenSSL stopped building it last year and removed it this year.
Based on OpenSSL commit c436e05bdc.
Also cranked major version in libcrypto, libssl and libtls.
"fine with me" bcook@ miod@

to get the network related vars from rc.conf. This is even necessary
if netstart is run from within /etc/rc. Remove test of $INRC which
unintentionally evaluated always to true.
problem with previous change found by nigel@
OK sthen@ aja@ halex@

- MATH_ERRNO, MATH_ERREXCEPTION and math_errhandling
- Optional FP_FAST_FMA{,F,L} macros if fma() executes as fast or faster
than (x * y) + z;  which in practice is achievable if gcc implements
__FP_FAST_FMA{,F,L}
Reported by John Marino @ DragonFlyBSD.

control-enable is used, our standard configuration is using unix domain sockets
without certs. existing setups with already-created certificates are ok, if
somebody needs remote+certs they can generate keys themself. ok florian@

keys/certificates for auth. ok florian@

It introduced a regression reported by nigel@

platforms) by explicitly making imsg->data = NULL when there is no
data. ok deraadt

OK halex@ krw@

inside /etc/rc.
With help from and OK halex@, ajacoutot@

input doug@; OK beck@

OK krw@ halex@

patch from Mikolaj Kucharski
ok deraadt@

OK tedu@

ok deraadt@ phessler@ claudio@

ok deraadt jeremy

ok phessler@ deraadt@

- no space in redirections like </foo or >$bar
- few other minor whitespaces
OK krw@

- Add comments for functions
- Start comments with capital letters
- End comments with a full stop
- Allow comments to extend up to column 80
OK krw@

multi-user builds. Discussed with espie, ajacoutot, ok deraadt

ok tedu@ rep@

/etc/examples/ntpd.conf
ok deraadt@ benno@ schwarze@

ok jsing@

ok halex@

This allows running several instances of the same rc.d(8) script by just
linking it to different name.
e.g.
ln -s ftpproxy ftpproxy6
echo 'ftpproxy6_flags=-6' >>/etc/rc.conf.local
This is likely to break some rc.d scripts in ports. I will try and fix them all
in the next few days but I'd appreciate reports if I missed some.
ok halex@

This is necessary so that rc.d scripts launched with `-f' can be properly
stopped, checked and reloaded.
ok schwarze@

The man page was already correct.

ok gilles claudio doug