Support for the authority information access extension, limited to
only grabbing type 6 (URL) values for OCSP which is likely the only
thing it's ever used for. Expose the value with new function
X509_Certificate::ocsp_responder
Call clear_mem instead of memset directly
Use libc++ with Clang by default as libstdc++ and Clang don't play
well together in C++11 mode.
Target GCC 4.7.0 by default
Fix examples building
Add new PBKDF interface that takes a std::chrono::milliseconds and
runs the KDF until at least that much time has passed, then returns
the number of interations used.

New parameter to the PKCS8 encryption routines which tells how long to
run the PBKDF. Defaults to 200 milliseconds, which is short enough
that it is unlikely to bother anyone but long enough to provide quite
reasonable security against cracking attacks.  On a Core i7-860, 200
ms with PBKDF2/SHA-1 runs about 180K to 220K iterations (compare with
previous default of 10K).

New PBE interface, remove new_params/set_key and require all inputs
including the passphrase to be passed to the constructor.

Drop the PGP S2K as it is pretty weird and not really useful outside
of a full PGP implementation.

Drop the deprecated PKCS8::encrypt_key and PKCS8::encode functions.
Allow arbitrary ciphers and hashes with PKCS #5 v2.0. The only
requirement is that OIDS for "<cipher>/CBC" and "HMAC(<hash>)" are
defined. This does assume the normal parameter set of just the IV, so
doesn't work right for (IIRC) RC5, but we don't have an OID set for
RC5/CBC anyway. Continue to default to SHA-1 plus AES-256 as prior
versions of the library can't handle any hashes other than SHA-1 or
any ciphers other than AES or DES. OpenSSL 1.0.0j seems to understand
SHA-256 + AES-256, though.

BER_Decoder::decode_optional was assuming optional values were
explicitly tagged. Now, only take that behavior if the input class tag
was for a context specific tagging.

Remove abort call for debugging from BER_Decoder

Add a new version of DER_Encoder::encode_if for single objects.
Various examples fixes, most notable updating cert_verify to the new API
Drop some deprecated functions
Missing source file from d8021f3e5aa8812a2843d6afd27bbe56d04af734
Wrong OID name
Always print the include dir as we are never in the default path
anymore.
Add assert_done checks here to help avoid interesting substitution
attacks and in general detect invalid messages.
Modify DL_Group::PEM_decode and BER_decode to take values instead of
DataSource&.

Remove spurious DataSource_Memory from ec_group.cpp

Some indent fixes
Fix for DHE, strip_leading_zeros always took off the last byte
Clients sending a SSLv2 hello would cause an internal failure because
choose_sig_format assumed Client_Hello::supported_algos would always
return something. For SSLv2 hellos, always set it to the default
values. Noticed with OpenSSL 0.9.7m

If a client attempts renegotiation but does not have a secure
renegotiation, only continue if policy allows it. Otherwise send a
no_renegotition alert (what exactly servers are supposed to do is not
really made obvious by the RFC but this seems like reasonable
behavior).
Cleanup, m_ namespace Secure_Renegotiation_State
Report what we have already received on an unexpected state
transition. That will come in handy someday.

Allow the server to skip sending a session ticket. GnuTLS seems prone
to offering it even if it doesn't have a key handy.

Fix vector/secure_vector conversions in the SQLite session manager.
Update cms, cvc, zlib, bzip2, openssl, and gnump modules for the new
allocator interface. The compression filters now just use malloc/free
with a memset.

Add a new info.txt field <warning>, like comment but warns.  Use for
CMS which is pretty broken (doesn't even compile anymore), and for TLS.
Fix extension testing (bug 193)