Add volatile qualifications to two blocks of inline asm to stop GCC from
eliminating them as dead code.

Both volatile and "memory" are used because of some concern that the compiler
may still cache values across the asm block without it, and because this was
such a painful debugging session that I wanted to ensure that it's never
repeated.
Ensure that x**0 mod 1 = 0.
Ensure that, when generating small primes, the result is actually of the
requested size. Fixes OpenSSL #2701.

This change does not address the cases of generating safe primes, or
where the |add| parameter is non-NULL.

Conflicts:
	crypto/bn/bn.h
	crypto/bn/bn_err.c
Reencode with X509_CRL_ctx_sign too.
Fix PSS signature printing.

Fix PSS signature printing: consistently use 0x prefix for hex values for
padding length and trailer fields.
x86cpuid.pl: fix extended feature flags detection.
ghash-x86_64.pl: add Haswell performance data.
sha[256|512]-586.pl: add more SIMD code paths.
sha512-x86_64.pl: upcoming-Atom-specific optimization.
sha1-x86_64.pl: add AVX2+BMI code path.
aesni-sha256-x86_64.pl: harmonize with latest sha512-x86_64.pl.
aesni-sha1-x86_64.pl: update performance data.
Add aesni-sha256-x86_64.
Add support for arbitrary TLS extensions.

Contributed by Trevor Perrin.
Typo.
Exetended OAEP support.

Extend OAEP support. Generalise the OAEP padding functions to support
arbitrary digests. Extend EVP_PKEY RSA method to handle the new OAEP
padding functions and add ctrls to set the additional parameters.
Document updates from wiki.

PR#3071

The primary changes made are:
- Updates to the "NAME" section of many pages to correctly reflect the
functions defined on those pages. This section is automatically parsed
by the util/extract-names.pl script, so if it is not correct then
running "man" will not correctly locate the right manual pages.
- Updates to take account of where functions are now deprecated
- Full documentation of the ec sub-library
- A number of other typo corrections and other minor tweaks
Ignore one-makefile stuff.
Add secure DSA nonce flag.

This change adds the option to calculate (EC)DSA nonces by hashing the
message and private key along with entropy to avoid leaking the private
key if the PRNG fails.
empty_record_limit

Limit the number of empty records that will be processed consecutively
in order to prevent ssl3_get_record from never returning.

Reported by "oftc_must_be_destroyed" and George Kadianakis.