Merge branch 'debian-merge-0.2.9' into debian

* debian-merge-0.2.9:
  New upstream version: 0.2.9.5-alpha
  Fold in one more changes entry
  When using exponential backoff in test networks, use a lower exponent
  Tomorrow seems more likely
  bump version to 0.2.9.5-alpha
  Small changelog tweaks
  Fold new entries into changelog and edit lightly
  Make new changes files pass lintchanges
  Fix another 20499-broken test
  Fix a unit test (broken by recent 20499 hacking)
  Add onion_service_non_anonymous file to man page
  Reduce multiplier to 3, per teor's recommendation on #20534
  Always increment delays by at least 1.
  Avoid integer overflow in delay calculation.
  Count HTTP 503 as a download failure.
  Adjust download schedules per teor's #20534 recommendataions
  Allow infinitely long delays in exponential-backoff downloads
  Update geoip and geoip6 to the November 3 2016 database.
  When downloading certificates, check for related failures
  Ensure relays don't make multiple connections during bootstrap
  Always Use EVP_aes_*_ctr() with openssl 1.1
  Finish a sentence in a comment. Close 20576.
  In test_tortls_classify_client_ciphers(), s/ECDH/ECDHE/
  Do not apply 'max_failures' to random-exponential schedules.
  Change a BUG warning to be a warning, not an info.
  Fix get_delay() code to avoid TIME_MAX overflow, not INT_MAX.
  Start changelog for 0.2.9.5-alpha
  Fix warnings from lintChanges.py
  Work around a behavior change in openssl's BUF_MEM code
  Use explicit casts to avoid warnings when building with openssl 1.1
  Use the latest options in rend_service_check_private_dir
  Check every hidden service directory's permissions when configuring
  Test single onion service configs where the directory does not exist
  Make sure passthrough_test_setup doesn't inadvertently fail or skip tests
  Add get_fname_rnd for unit tests that want a unique path every time
  Create get_fname_suffix, and refactor get_fname to use it
  Improve comments in check_private_dir and onion poisoning
  fixup! Refactor, adding a create argument to rend_service_check_private_dir
  Use check_private_dir in test_single_onion_poisoning
  Remove redundant group permission code from rend_service_check_private_dir
  Refactor, adding a create argument to rend_service_check_private_dir
  Always call connection_ap_attach_pending() once a second.
  Ask event_base_loop to finish when we add a pending stream
  refactor out the tor_event_base_loopexit() call
  Attempt to fix unit tests on netbsd
  Actually free the worker_state_t object when we do an update with it
  Add a sentence to the manpage about nonanonymous=>Socksport 0.
  Create single-onion-service directory before poisoning it, if needed
  Actually clamp the number of detected CPUs to 16.
  Rename routerstatus_version_supports_ntor to *_supports_extend2_cells
  Refactor circuit_pick_create_handshake
  In circuit_pick_extend_handshake, assume all hops support EXTEND2 and ntor
  Avoid tor_fragile_assert() failure with DNSPort on RESOLVED_TYPE_ERROR
  changes file for module docs
  Module-level docs for ext_orport and router.c
  Turn replaycache.c module doc into doxygen
  Document connection_or.c and connection.c at module level
  Module documentation for circuitmux_ewma.c
  Turn circuitmux.c comments into module docs.
  Module docs for channel.c and channeltls.c
  Bump to 0.2.8.9-dev
  Bump master to 0.2.9.4-alpha-dev