update copyright notice / whitespace

Don't use memset() to wipe memory (#45947) (cherry picked from commit d5707676e45551d1ceb600a674f3f13351fd3105)

add more LIBRESSL_VERSION_NUMBER checks (cherry picked from commit 3d38cfaf8a05fe272173fdea4d747de70f67ad5d)

4497. [port] Add support for OpenSSL 1.1.0. [RT #41284] (cherry picked from commit 1fce0951ed172fc3834a3a379c4e00b78224cc5d)

4450. [port] Provide more nuanced HSM support which better matches the specific PKCS11 providers capabilities. [RT #42458] (cherry picked from commit 8ee6f289d87851a5b898b24a64587f0e6bc225bc)

4401. [misc] Change LICENSE to MPL 2.0.

4265. [bug] Address unchecked isc_mem_get calls. [RT #41187]

4340. [port] Fix LibreSSL compatibility. [RT #40977]

[master] address buffer accounting error 4168. [security] A buffer accounting error could trigger an assertion failure when parsing certain malformed DNSSEC keys. (CVE-2015-5722) [RT #40212]

silence coverity warnings

update copyright notice / whitespace

4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532]

[master] rationalize external key handling 3723. [cleanup] Imported keys are now handled the same way regardless of DNSSEC algorithm. [RT #35215]

[master] address several issues with native pkcs11

update copyrights

[master] native PKCS#11 support 3705. [func] "configure --enable-native-pkcs11" enables BIND to use the PKCS#11 API for all cryptographic functions, so that it can drive a hardware service module directly without the need to use a modified OpenSSL as intermediary (so long as the HSM's vendor provides a complete-enough implementation of the PKCS#11 interface). This has been tested successfully with the Thales nShield HSM and with SoftHSMv2 from the OpenDNSSEC project. [RT #29031]

update copyright notice

3642. [func] Allow externally generated DNSKEY to be imported into the DNSKEY management framework. A new tool dnssec-importkey is used to this. [RT #34698]

[master] silence noisy OpenSSL logging 3402. [bug] Correct interface numbers for IPv4 and IPv6 interfaces.

3354. [func] Improve OpenSSL error logging. [RT #29932]

3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228]

update copyright notice

set $Id$

3069. [cleanup] Silence warnings messages from clang static analysis. [RT #20256]

update copyright notice

3006. [func] Allow dynamically generated TSIG keys to be preserved across restarts of named. Initially this is for TSIG keys generated using GSSAPI. [RT #22639]

silence compiler warnings. [RT #20472]

keygen progress indication [RT #20284]

2669. [func] Update PKCS#11 support to support Keyper HSM. Update PKCS#11 patch to be against openssl-0.9.8i.

update copyright notice

integrate -P1 patch

update copyright notice

add EVP and PKCS11

update copyright notice

update copyright notice

DSA_generate_parameters_ex parameters

update copyright notice

2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563]

2105. [func] GSS-TSIG support (RFC 3645).

update copyright notice

1994. [port] OpenSSL 0.9.8 support. [RT #15694]

update copyright notice

1851. [doc] Doxygen comment markup. [RT #11398]

1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should allow parallel make to succeed.