Merge branch 'debian-merge-0.2.8' into debian-0.2.8

* debian-merge-0.2.8:
  New upstream version: 0.2.8.11
  Copy ChangeLog into ReleaseNotes; pick a date (today)
  Bump to 0.2.8.11
  Mention the 2nd part of 20865 in the changelog
  Actually include the changelog though.
  Backport the other sierra fix in 20865.
  Start a changelog for 0.2.8.11
  20865: Don't use getentropy() on OSX Sierra.
  Always Use EVP_aes_*_ctr() with openssl 1.1
  Bump to 0.2.8.10-dev