Log message:
Add SHA512 digests for distfiles for security category

Problems found locating distfiles:
	Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz
	Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz
	Package libidea: missing distfile libidea-0.8.2b.tar.gz
	Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2
	Package uvscan: missing distfile vlp4510e.tar.Z

Otherwise, existing SHA1 digests verified and found to be the same on
the machine holding the existing distfiles (morden).  All existing
SHA1 digests retained for now as an audit trail.

Log message:
Update py-itsdangerous to 0.24.

Version 0.24
~~~~~~~~~~~~

- Added a `BadHeader` exception that is used for bad headers
  that replaces the old `BadPayload` exception that was reused
  in those cases.

Log message:
Mark packages as not ready for python-3.x where applicable;
either because they themselves are not ready or because a
dependency isn't. This is annotated by
PYTHON_VERSIONS_INCOMPATIBLE=  33 # not yet ported as of x.y.z
or
PYTHON_VERSIONS_INCOMPATIBLE=  33 # py-foo, py-bar
respectively, please use the same style for other packages,
and check during updates.

Use versioned_dependencies.mk where applicable.
Use REPLACE_PYTHON instead of handcoded alternatives, where applicable.
Reorder Makefile sections into standard order, where applicable.

Remove PYTHON_VERSIONS_INCLUDE_3X lines since that will be default
with the next commit.

Whitespace cleanups and other nits corrected, where necessary.

Log message:
PYTHON_VERSIONS_INCOMPATIBLE cleanup.

Log message:
Update py-itsdangerous to 0.23.

Version 0.23
~~~~~~~~~~~~

- Fixed a packaging mistake that caused the tests and license
  files to not be included.

Log message:
Update py-itsdangerous to 0.22.

Version 0.22
~~~~~~~~~~~~

- Added support for `TimedJSONWebSignatureSerializer`.
- made it possible to override the signature verification function
  to allow implementing asymmetrical algorithms.

Log message:
Import itsdangerous-0.21 as security/py-itsdangerous.

It's Dangerous
   ... so better sign this

Various helpers to pass data to untrusted environments and to get it back
safe and sound.

This repository provides a module that is a port of the django signing
module.  It's not directly copied but some changes were applied to
make it work better on its own.