Update website for new release

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/158)

Add link to the QUIC blog post

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/156)

Update the Release Strategy for 3.0

Schedule some alpah and beta releases for 3.0

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/web/pull/154)

Update the website to remove a number of 1.0.2 references

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/153)

Create an OTC page on the website

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/152)

Update policies for OTC changes

Update other policies as necessary to reflect the bylaws changes that
introduced the OTC concept.

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/146)

Merge pull request #148 from mattcaswell/remove-110-additional

Remove an additional 1.1.0 reference

Merge pull request #151 from iamamoose/eolstatements

Allow a default statement if our page is not for a specific base version

Allow a default statement if our page is not for a specific base version
also clean up the HTML we closed the p tag in the wrong place.  Add a
statement on all the versions out of support.

Merge pull request #150 from iamamoose/eolstatements

Update the vulnerability XML to also include some statements about EOL

Update the vulnerability XML to also include some statements about EOL versions
that was we can make it clear on the vulnerability page when things are EOL

Updates for the 1.0.2u release

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/149)

Remove an additional 1.1.0 reference

We previously removed references to 1.1.0 as a current release. There is
one remaining spot that was missed, so we update that too.

Drop 1.1.0 as a current release

Don't refer to 1.1.0 as a current release since it is no longer supported.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/147)

Update the by-laws to introduce the OTC concept

We split the responsibilities of the current OMC into two different
groups - the OMC and the OTC (OpenSSL Technical Committee). The OMC still
retains its overall management function but the OTC becomes responsible
for technical decision making.

PR reviews will then require approval from an OTC member instead of an
OMC member.

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/143)

Update newsflash for security advisory

Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/144)

Add security advisory for CVE-2019-1551

Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/144)

Update key's expiration date

Clarify the Premium support contract wording

The current text is not correct.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/141)

Merge pull request #140 from iamamoose/sponsorship

Sync the OSF sponsorship page with the current sponsors

Better grammar for where the support goes

Update the sponsorship page to be current with the list of OSF
sponsors.  Add a bronze level and the current sponsors at that level.
Add a link to the 'in kind' thanks page.

Add a link to the new blog post

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/139)

.htaccess: force .sha256 files to application/binary

source: Remove gz encoding on .gz.sha256 files

Fix typo in advisories

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/137)

Website updates for new releases

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/136)

Correct typo in security advisory

Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/web/pull/135)

CVE-2019-1552 security advisory

Reviewed-by: Mark J. Cox <mark@awe.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/134)

Include description of a trivial commit.

Trivial submissions are mentioned but not defined.

When producing HTML man-pages, include the original base name

For OpenSSL 1.1.0 and on, this isn't relevant any more, since all pod
names should be one of the names in the NAME section.  However, 1.0.2
pages were written differently, and people still refer to the original
base name to look up documentation.

Fixes openssl/openssl#9189

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/132)

Update the copyright date in the licence file

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/131)

Updates for releases 1.0.2s, 1.1.0k and 1.1.1c

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/129)

Update security policy

Discussed at the OMC face to face that we should make it clear what things we consider in and out of scope of being OpenSSL vulnerabilities and therefore what we will assign a CVE for

Update of 3.0.0 design: addition of a provider context

This changes gives providers the opportunity to create a context for
the execution of the operations and algorithms it provides.

The idea is that OSSL_provider_init() will create that context, and
the teardown function will destroy it, and libcrypto is simply
responsible for saving away the pointer to the context and pass it
down to appropriate provider side functions (typically the
constructors of operation specific contexts).

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/128)

OpenSSL300Design: fix two broken links

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/126)

OpenSSL300Design: lighten watermark

The strong DRAFT watermark is very distracting while reading and makes
the eyes loose the current reading position while scrolling.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/127)

Website updates for CVE-2019-1543

Reviewed-by: Mark J. Cox <mark@awe.com>
(Merged from https://github.com/openssl/web/pull/125)

Don't try to hide section numbers / links in manpages

In previous times, we produced manpages in apps/, crypto/ and ssl/,
and having to deal with links containing '/man{n}/' was only tedious,
so we simply removed the section numbers from the L<> POD codes.

Now that we've switched to regular manpage layout, removing the
section numbers is not necessary any more, and also leads to incorrect
links when the L<> code refers to pages in a different man section.

Issue was reported on
[openssl-users](https://marc.info/?l=openssl-users&m=155138532927266&w=2).
Thank you Paul Smith

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/124)

bin/mk-manpages: allow slashes in names

The names in the NAME section may describe headers, which contain a slash
for OpenSSL headers.  We deal with that by converting slashes to dashes
for the file names.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/123)

Add commentary in the Makefile to explain what is going on

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Change news/openssl-notes.html.in to use Template Toolkit

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Clean up .gitignore

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: generate vulnerabilities indexes from templates

Adapt Makefile accordingly

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: generate source indexes from templates

Adapt Makefile accordingly

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: remove the manpage dir cleanup from bin/mk-manpages

Let the Makefile take care of it instead

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: generate docs/manpages.html from template

Change Makefile accordingly

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: generate all manpage indexes from templates

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: produce news/changelog.html from a template

This templates produces a list of links to release changelogs from a
passed list of release versions.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: add a template processing script

The choice comes to using [Template Toolkit], as it's powerful,
flexible, and consistent enough.

-----

[Template Toolkit]: http://www.template-toolkit.org/

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: strip away hard coded release versions from scripts

Adapt Makefile accordingly

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: documentation

Move the processing of changelogs and notes to use SERIES, using GNU
make features.

This only does part of the job.  A later commit will automatically
create the whole documentation directory structure from templates.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: vulnerability pages

Move the processing of vulnerability pages to use SERIES and
OLDSERIES, using GNU make features.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: changelogs and notes

Move the processing of changelogs and notes to use SERIES, using GNU
make features.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Remove redundancy: Start with defining a few variables for release series

We hard code release series in much too many places, which is error
prone.

We start with defining a few make variables with current and older
series.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/120)

Add extended support to the support contracts page

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
(Merged from https://github.com/openssl/web/pull/122)

Update the release strategy modification date

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/82)

Add a stability policy to the release strategy

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/82)

Generalise the descriptions of alpha, beta, and release criteria

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/82)

Remove the 1.1.1 time table and add support information

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/82)

Release strategy: add text on the 3.0.0 versioning scheme

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/82)

Clarify the advisory regarding AEAD ciphersuites

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/121)

Updates for new releases

Reviewed-by: Richard Levitte <levitte@openssl.org>

3.0.0 design doc: /usr/share -> /usr/lib

/usr/share was a bad example for storing modules

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/119)

3.0.0 design doc: mark all code sections with a language where possible

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/119)

Remove rel=canonical from head.shtml

With that line we are claiming that all our web pages are synonyms of the
home page.

Fixes #117

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/118)

Typo

Fix CSS props for code color

The 'pre' CSS is enough, we have no need for variants for 'p code',
'li code', 'p pre code' and 'li pre code'...

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/116)

Stray 'q' begone!

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/115)

Make a general rule for converting markdown to html5

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/114)

Publish  the Strategic Architecture and 3.0.0 Design (draft) documents

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/114)

OpenSSL 3.0.0 Design: make the state uppercase

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/113)

Allow extra header stuff, and use it to correct the list style type

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/113)

Add the OpenSSL 3.0.0 Design document (draft)

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/113)

MD to HTML: add a mechanism to show a document state

If the YAML metadata of a document contains a 'state:' attribute, it
will be rendered with large sans-serif in a 45 degree angle.

Requires CSS3

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/113)

MD to HTML: allow extra header stuff

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/113)

Add the OpenSSL Strategic Architecture document

Includes notes on how to convert documents from Google Docs to Markdown.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/110)

bin/md-to-html5: change output directory

The output directory should be the same as for the input file

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/111)

bin/mk-mancross: new manpage cross reference script

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/107)

bin/mk-manpages: refactor to allow cross references between releases

So far, we created one HTML file for each POD file, and then made hard
links to it for other names that are in the POD file's NAMES section.

However, this came with the assumption that cross referencing between
releases would work simply be linking to the same name on other
releases.  This, however, did not take into account that manuals in
newer releases don't necessarily exist in older releases, or that some
files may have changed names.

Names in NAMES sections are, however, fairly constant, and are
therefore much safer to link to.  At the same time, it's safe to say
that if a particular name doesn't exist in some other releases, there
should simply not be a link.  A conclusion to draw from is that cross
referencing must be made on a per NAMES section name basis, rather
than on POD file name basis.

To allow this to happen and still not have to rewrite the same
Pod2Html result for every name in a specific POD file's NAMES section,
the structure of the rendered man pages are changed to this:

-   POD files are rendered into a .inc file with the exact same
    basename as the POD file.
-   For every name in the NAMES section, am HTML file is created.  It
    contains the standard header and footer stuff, and includes the
    generated .inc file in the middle.  It also includes a .cross file
    with the same basename as the HTML file as part of the sidebar.

In another commit, there will be a script for cross referencing, which
will generate the .cross files mentioned above.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/107)

Handle document sectioning correctly

Gone are the apps/, crypto/ and ssl/ directories.  We move to a Unix
manpage structure for older releases as well as new ones.

With that, there's no more need for a separate bin/mk-newmanpages,
bin/mk-manpages can handle both the old and the new POD directory
structure.

For a document tree that previously had apps/, crypto/ and ssl/, we
provide a .htaccess that accepts the old URLs and maps them correctly
to man1/ or man3/.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/107)

mk-apropos: don't include non-manpage files

mk-apropos looks at all HTML files in a given directory, but failed to
recognise files that aren't rendered manpage, such as index.html.

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/web/pull/109)

Markdown to OpenSSL HTML5 pages

Markdown is a popular format for text files, and some documents are
easier to read in this form than in HTML.  For future purposes, this
is the scripts we need to process markdown files into HTML5.

This script is based on pandoc, which is a pretty good translator
between a range of different document formats.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/108)

Reformat FAQ files

Make them correct Markdown, and then use pandoc to create the FAQ HTML.
We then use CSS and a bit of Javascript to make it an accordion style
FAQ.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/103)

Merge pull request #105 from iamamoose/vulns

Add severities that were in the advisories but missing from the vulnerability pages, also found a missing vulnerability

Add severities that were in the advisories but missing from the
vulnerability pages, also found a missing vulnerability

Generate apropos-like tables instead of filelists for manpages

This works together with bin/mk-manpages' generation of description comment.

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/102)

Have bin/mk-manpages and bin/mk-newmanpages add a description comment

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/102)

Change getnames() to getdata(), for generic data retrieval from POD files

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/102)

Add 1.1.1 to manual sidebar

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/100)

Update CLA templates

Update the address in the CLA templates

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/97)

Switch to new (ASF) license

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/98)

Update PGP key

cla.html: make CLA download links and email address more prominent

Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/web/pull/92)

Updates for new release

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/95)

Updates for CVE-2018-5407

Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/web/pull/93)

Merge pull request #94 from iamamoose/master

trivial changes - CVE-2015-1788 was missing severity tag, fix bad website includes

CVE-2015-1788 was missing the severity tag

Update advisory for CVE-2018-0734 indicating that it introduced a new issue
and that this has been fixed.  Git commit versions are included.