Fix bug 9645: don't forget an md just because we can't save it.
Don't apply read/write buckets to cpuworker connections

Fixes bug 9731
Re-enable TLS 1.[12] when building with OpenSSL >= 1.0.1e

To fix #6033, we disabled TLS 1.1 and 1.2.  Eventually, OpenSSL fixed
the bug behind #6033.

I've considered alternate implementations that do more testing to see
if there's secretly an OpenSSL 1.0.1c or something that secretly has a
backport of the OpenSSL 1.0.1e fix, and decided against it on the
grounds of complexity.
Switch ECDHE group default logic for bridge/relay TLS

According to the manpage, bridges use P256 for conformity and relays
use P224 for speed. But skruffy points out that we've gotten it
backwards in the code.

In this patch, we make the default P256 for everybody.

Fixes bug 9780; bugfix on 0.2.4.8-alpha.
Merge remote-tracking branch 'public/bug6055_v2_024' into maint-0.2.4
Merge remote-tracking branch 'public/bug9780_024_v2' into maint-0.2.4
Merge remote-tracking branch 'public/bug9731b' into maint-0.2.4
Merge remote-tracking branch 'public/bug9645' into maint-0.2.4
Merge branch 'maint-0.2.4' into release-0.2.4