Update changelog; update config.yml; bump versions

David Fifield authored Jan 05, 2015 and Georg Koppen committed Jan 06, 2015

The meek-http-helper profile now has a proxy set even if it somehow
starts up without extensions.

usage: check_update_responses_deployement <base_url> [channels...]

example:
  $ ./check_update_responses_deployement \
        https://dist.torproject.org/torbrowser/update_2 release

This command will read the config.yml file, then try to load different
URLs to check that it returns correct xml with the expected version,
incremental update files for the versions that should have them, or no
update when already using the current version.

It does not currently check that the checksum of the files is correct.

The update_responses command can now receive a channel name as argument.
In that case, only the xml responses for the selected channel(s) are
updated. The files are now located in directory htdocfiles/$channel and
each channel has its own .htaccess file in that directory.

Makefile rules have been added to update the different channels.

The gen_incrementals can now receive a channel name as argument. In that
case, incremental MARs will be created for this channel only.

If there is no argument, incremental MARs for all channels are created.

Makefile rules have been added for the different channels.

This update takes account of the changes landed in #13379 and earlier
updater related bugs. It removes the section with spurious hangs during
builds as the underlying libfaketime problems should be fixed with the
switch to a newer libfaketime providing a more fine-grained control via
FAKETIME_SKIP_CMDS and friends.

In the Linux mar-tools package, include certutil, signmar, and the required
  NSS and NSPR libraries.
Change update_responses to select the action to be done based on the
  program name, thereby separating the incremental MAR file generation (done
  via a new 'gen_incrementals' symlink) from the htdocs generation.  Also added
  an 'update_responses' make target.  Thanks to boklm for help with this.
Add a series of 'signmar' make targets which run a new signmars.sh script,
which does the following:
  1. Prompts for an NSS password (the script assumes that an nssdb directory
     exists that contains the signing key/cert).
  2. Moves original (unsigned) MAR files to a TORBROWSER_VERSION-unsigned/
     directory.
  3. Signs each of the MAR files, placing the signed files in the
     TORBROWSER_VERSION/ directory.
  You may set NSS_DB_DIR and/or NSS_CERTNAME before running signmars.sh; the
  defaults are ./nssdb and marsigner

Set the locale and umask to avoid differences across systems and users when
generating incremental MAR files.

Bump Torbutton, NoScript and HTTPS Everywhere version. Update
config.yml and ChangeLog.

Thanks to the investigation and this fix, Lunar.

FTE seems to not need libgmpxx anymore. Additionally, we don't need
multiple copies of libgmp either. We remove all these unnecessary
libraries to save space and reduce complexity. Bug 13055 gets fixed by
this commit as well.