Fixed minor comment typo
Prepared for PolarSSL release 1.2.8
Added Security note (Advisory 2013-03) in ChangeLog
ssl_write_certificate_request() can handle empty ca_chain