Avoid rendering README.md

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in source/

This also fixes dirdata.yaml under source/ for better rendering of
breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in policies/

This also fixes dirdata.yaml under policies/ for better rendering of
breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in news/

This also fixes news/dirdata.yaml for better rendering of breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in top directory

This also fixes the top dirdata.yaml for better rendering of breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in docs/

This also fixes docs/dirdata.yaml for better rendering of breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Convert SSI includes to tt includes in community/

This also fixes community/dirdata.yaml for better rendering of breadcrumbs

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Add a markdown copy of inc/legalities.md

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Add a Makefile rule to allow tpage templates for anything

Reviewed-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tomas Vavra <tvavra@openssl.org>
(Merged from https://github.com/openssl/web/pull/426)

Update the text on our download page

Updates for 1.1.1 EOL and 3.2

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/424)

remove Activision from supporter list

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/422)

Richard's presentation

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/421)

Update for CVE-202304897

Remove references to the old trademark policy

The new trademark policy is live in the general-policies repository and
supercedes the old one. We should remove the old one.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/417)

Mention the OpenSSL OMC key among release keys

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/415)

Add CVE 2023-3817 to table

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/408)

Update CVE and FIPS page with new CVEs

Adding CVE-2023-2975 and CVE-2023-3446 which are fixed in 3.0.10 and 3.1.2.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/408)

Update FIPS and CVE page to include fixes in 3.1.1

Add 3.1.1 versions to the fixed column where relevant.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/408)

Move release table higher up

Currently the table of the latest releases for each major version is quite far down the page, even below the bottom of the viewport.

This confused me (and probably also others) as I thought the table was removed.

Move the table near the top of the page, as I feel that it's likely the most important part of the page in general.

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/414)

use svg image map, so that we see names on mouse hover

Signed-off-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/413)

Fix the about us image link

The path the team photo was incorrect in about.md

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/409)

about us page

fixes openssl/project#21

Signed-off-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/406)

mission and values page

fixes openssl/project#69

Signed-off-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/407)

Depend on the directory containing the old sources

Otherwise the regeneration won't be properly triggered.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/web/pull/405)

Revert "Remove 1-year sponsor"

This reverts commit f23a0b8a667a93cd1ccdadbd6ccd1ffde0ed7d14.

Reviewed-by: Tamara Dale <tam@openssl.org>
(Merged from https://github.com/openssl/web/pull/404)

Update the sponsors page

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/403)

Add CVE-2023-2650 to the FIPS CVE status page

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/402)

fips: add 3.0.8 to validated FIPS providers.

Also add security policy documents to web site to avoid reliance on NIST.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/401)

Update FIPS and CVE page in light of 3.0.8 FIPS provider

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/401)

Add page describing CVEs and their impact on the FIPS provider.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>

README: Explain the OpenSSL::Query requirements

... also, reinstate git.  We do depend on it quite a lot.

Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/399)

README: list all the dependencies to build this repo.

This is everything that you will need additionally install to a bare
Debian/Ubuntu distro in order to build this repo.

Signed-off-by: Anton Arapov <anton@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/398)

Fixup the news titles (remove ###)

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/396)

Various updates to wording on the website following the 3.1 release

Updates to the download page to reflect that 3.1 is now the latest release.
We also take the opportunity to update some things related to the
forthcoming 1.1.1 EOL.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/397)

Clean up the html display of the security data by splitting on
paragraphs.  Also fix the reported/found data which was inconsistent
on new entries

Update expiration date of PGP key

GH: #391
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>

Remove 1-year sponsor

Remove doc reference to the legacy FOM.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/389)

Fix FIPS Menu Link

It is no longer a legacy FIPS validation.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/389)

Fix policy redirects

We have recently removed two policies in favor of new ones in the general/
subdirectory.  For the benefit of anyone having links to the old policy
documents, we habitually add redirects so they get to the new version.
We forgot that for the platform and travel policies...

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/388)

The FAQ versioning was out of date. Updated to point to the policy.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/377)

Update pink nirvana and related documentation.

I have seen multiple instances of references to the design document,
and in a few cases copying of the pink nirvana diagram - so it was time
to update it to match what we currently have.
Also changed text related to the engine provider, since that was
completely misleading.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/380)

Update Download Section related to FIPS.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/376)

Update the info related to FIPS.
Now that there is a 3.0 FIPS provider, and the 1.0.2 is
historical, the deleted text is no longer relevant.

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/376)

Fix stale travel policy link

There wass still one link remaining to the old Travel Policy

Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/387)

Drop the old travel policy file, as it is now in general-policies

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/366)

Update the copyright line

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/386)

Handle case of a vulnerability that's public but is not in a full
release yet

Add back the premium support link as github links that don't work are
not useful (they should eventually be changed in the json files)

Remove old file

CVE project has a broken redirect so we need to use cve

Trailing slash is needed for parser

Base the vulnerability pages from the JSON files instead of the old XML
file

Let's have the json files appear on the site (like we did for
vulnerabilities.xml)

Option -e is no longer used, data comes from a statements.json file

Update credit handling

Deal with disputed cves

Add statements

A few CVE don't have titles or advisories, so make sure we can handle
that.  The output HTML now matches the current site, apart from

1. fips
2. the out of support statements
3. the not-an-issue statements

Update to match the current file

Doesn't do 'also in...' or the wierd issues

Less debug
Don't append the fixed versions to the description, CVE project
shouldn't need this any more

Add a creator that doesn't conflict with vulnogram showing the date and
time the file was imported (should only happen once).

Impact is required, so add a unknown one

Dates should have a timezone, don't include a problemtype if none
exists, other fixes so that everything now validates.

Add function to return the earliest affected version

Create a XML to JSON5 converter, not complete

Added Microsoft among silver sponsors

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/374)

Add data for OpenSSL 3.1

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Hugo Landau <hlandau@openssl.org>
(Merged from https://github.com/openssl/web/pull/373)

support/acks.md: Remove "current" link

Originally (when this file was still raw HTML), this was an ID
(<h3 id="current">Sponsorship Donations</h3>).  Turning it into a link
was a clear typo.

As far as I can tell, nothing linked to acks.html#current, so we can
as well drop it entirely.

Fixes #371

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/372)

Make better rendering of general policy-supplementals

The quick method in the previous commit was incorrect.  We change it to
align with how other policy files are rendered.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/369)

We have policy-supplementals, let's render them

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/368)

Drop the old platform policy file, as it is now in general-policies

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/365)

udpated roadmap file

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/367)

Move VMS on IA64 and X86_64 from community to secondary

It is supported by a team member (Richard Levitte), [VSI] provides
hosts which Richard has access to running those VMS versions, and they
are plugged into our [buildbot CI].

[VSI]: https://vmssoftware.com/
[buildbot CI]: https://ci.buildbot.openssl.org/

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/363)

Remove sponsor

Adapt bin/mk-notes for OpenSSL 3.0's NEWS.md

NEWS.md in OpenSSL 3.0 has changed quite radically from previous OpenSSL
versions' NEWS.  bin/mk-notes has not been adjusted to process them, which
renders the new notes pages very empty of information.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/web/pull/361)

Restore the FAQ accordion functionality

When converting docs/faq.html to faq.md, the little scriptlet that
enabled the FAQ answer accordion functionality was lost, making it
impossible to expand the answers.

This restores that functionality.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
(Merged from https://github.com/openssl/web/pull/360)

Fix problems with newer pandoc versions

Pandoc absolutely wants a styles.html alongside the HTML5 template, so
we give it one that's empty.

Also, --base-header-level is deprecated and should be replaced with
--shift-heading-level-by.  The pandoc documentation gives us this
formula:

    Use --shift-heading-level-by=X instead, where X = NUMBER - 1

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/359)

Following an OMC decision, remove all FOM v2 information

The old FOM v2 has stopped being relevant for quite a while, and now
that the new FIPS module has got a certificate, it's time to finally
drop all documentation of the old one.

^PET-237 Closed

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/358)

Add BSD-armv4 platform

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/357)

Move $(H_DOCS) into $(SIMPLEDOCS)

This allows more complete separate building of documentation.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/356)

Merge branch 'premiumgit'

If a release is only available to premium support customers because it
is EOL then don't link to github as those patches won't be there

$(SRCLISTS) isn't phony!

This was probably around because we used this variable to list tarballs.
Things have changed since, and making the contents of this variable phony
is now in error.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/349)

Convert all source/old/*.html to .md

Partial fix of #324

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/349)

Convert all source/*.html to .md

Partial fix of #324

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/349)

Bugfix: make knows $(dir ...), not $(dirname ...)

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/345)

bin/from-tt: Correct bugs for determining [% top %]

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/345)

Convert docs/sub-*.html.tt to .md.tt

This removes docs/mansidebar.html.tt, which is essentially replaced
by docs/sub-dirdata.yaml.tt

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/345)

Convert docs/*.html to .md

We only take the easy parts, and leave manual page generation files alone.

Partial fix of #324

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/345)

Correct case as asked

Add Bronze sponsor Sakura Internet, remove Bronze sponsor Jameson Lopp

Add a README as a guide how to write markdown pages, and how to build

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/351)

Remove the top date record

...  it's repeated in the history section at the end of the bylaws, so
is unnecessarily redundant.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/352)

Update policies/omc-bylaws.md with a history line re the minor edit clause

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/352)

policies/omc-bylaws.md: Add a clause on minor edits

As per discussion on the OMC meeting 2022-07-13, a clause for minor edits
is added, to allow edits that do not change the meaning of the bylaws, such
as a conversion to markdown.

An OMC vote has been held regarding this commit, and passed.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/347)

Convert all policies/*.html to .md

Partial fix of #324

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/347)

Convert all top .html to .md

Pandoc makes this really easy:

    pandoc -f html -t markdown -o index.html index.md

Only very minute small manual adjustments are needed afterwards.

Partial fix of #324

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/343)

Convert all support/*.html to .md

Partial fix of #324

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/348)

Convert all news/*.html to .md

Partial fix of #324

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/web/pull/346)