Proposal: Remove MD5 / SHA1 support from veriexec

Hello,
As a two part process, I propose we remove the ability to generate
signatures using SHA1/MD5 with veriexecgen as a part of NetBSD 8.
Then in HEAD for NetBSD 9, we remove support for these hashes from the
remaining components & kernel configuration files.

Part 1:
http://www.netbsd.org/~sevan/patch-veriexecgen.txt

Part 2:
http://www.netbsd.org/~sevan/patch-veriexec-nomd5-sha1.txt

Thoughts / objections?


Sevan