Log message:
ucspi-ssl: update default ciphers. Bump PKGREVISION.

Fixes 'sslserver: error: (111) unable to set cipher list' on startup.

Log message:
*: recursive bump for perl 5.40

Log message:
ucspi-ssl: Fix newly introduced non-C99.

Log message:
ucspi-ssl: update to 0.13.03. Changes:

- Added capability for sslclient to read the password for a protected
  keyfile alternatively from a file instead of FD 3.
- Removed obsolete ssl_params_ecdh() function.

Updating during the freeze for the workaround to a bug on some platforms.

Log message:
ucspi-ssl: update to 0.13.02. Changes:

- Small fix for GCC 14.2 compiler. rts tests don't use encrypted
  keyfiles for sslclient.

Log message:
ucspi-ssl: update to 0.13.01. Changes:

- More verbose information for sslserver for (missing) key material.
- Removed pre OpenSSL 1.1.1 API calls. Adjusted sig handler signature.
- Still need testing on different environments (OpenSSL/LibreSSL).
- fehQlibs-25 required. getoptb() used instead getopt().
- Re-issued ECC certificates. RTS is working now fine.
- Changed error code display; ssl_error.c not used/working anymore.
- The SSL client certificate verification is happening during handshake.
- Using package/rts, sslclient can not be fed with a client keyfile
  password under OmniOS.
- Added SAN Email and FQDN as MOD_SSL variables for client and server.
- Regression tested against OpenSSL and LibreSSL (providing TLS 1.3 and
  ECC support).

Log message:
ucspi-ssl: depend explicitly on fehqlibs>=19. NFCI.

Log message:
ucspi-ssl: install library and header file.

From George Matsumura in PR pkg/58460.

Log message:
ucspi-ssl: update to 0.12.10. Changes:

0.12.8:
- Added new x509 certs and key material; all ECC now.
- Fixed wrong evaluation of peer cert in ssl_verify (none-critical).

0.12.9:
- Included IP info in sslserver's TLS error messages for a quick lookup.
- Fixed sslhandle's wrong if nesting.
- sslserver return FATAL (and not ERROR) in case TLS is requested but missing.
- Enhanced compatibility with OpenSSL 3.x.y.

0.12.10:
- Added argument '-y cdb' to sslserver in order to allow a rule checking
  for IP addresses prior of the DNS/IDENT lookup (to cope with DDos attacks).

Log message:
*: bump for openssl 3