update copyright notice / whitespace

Don't use memset() to wipe memory (#45947) (cherry picked from commit d5707676e45551d1ceb600a674f3f13351fd3105)

add more LIBRESSL_VERSION_NUMBER checks (cherry picked from commit 3d38cfaf8a05fe272173fdea4d747de70f67ad5d)

update copyright notice / whitespace

4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] (cherry picked from commit 1fce0951ed172fc3834a3a379c4e00b78224cc5d)

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

4401. [misc] Change LICENSE to MPL 2.0.

4264. [bug] Check const of strchr/strrchr assignments match argument's const status. [RT #41150]

4340. [port] Fix LibreSSL compatibility. [RT #40977]

[master] address buffer accounting error 4168. [security] A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. (CVE-2015-5722) [RT #40212]

silence coverity warnings

update copyright notice / whitespace

4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]

4128. [bug] Address issues raised by Coverity 7.6. [RT #39537]

3974. [bug] handle DH_compute_key() failure correctly in openssldh_link.c. [RT #37477]

[master] rationalize external key handling 3723. [cleanup] Imported keys are now handled the same way regardless of DNSSEC algorithm. [RT #35215]

update copyrights

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]

update copyrights

3681. [port] Update the Windows build system to support feature selection and WIN64 builds. This is a work in progress. [RT #34160]

3354. [func] Improve OpenSSL error logging. [RT #29932]

update copyright notice

3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228]

update copyright notice

3006. [func] Allow dynamically generated TSIG keys to be preserved across restarts of named. Initially this is for TSIG keys generated using GSSAPI. [RT #22639]

silence compiler warnings. [RT #20472]

keygen progress indication [RT #20284]

update copyright notice

2669. [func] Update PKCS#11 support to support Keyper HSM. Update PKCS#11 patch to be against openssl-0.9.8i.

update copyright notice

add EVP and PKCS11

update copyright notice

update copyright notice

update copyright notice

prime_len -> key->key_size

2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]

2105. [func] GSS-TSIG support (RFC 3645).

update copyright notice

1994. [port] OpenSSL 0.9.8 support. [RT #15694]

1888. [func] "USE INTERNAL MALLOC" is now runtime selectable. [RT #14892]

update copyright notice

1851. [doc] Doxygen comment markup. [RT #11398]

1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should allow parallel make to succeed.