Fixed memory leak of http buffer in OCSP lookup.
fix user malloc define w/ opensslextra
Fixed bug in DecodeAltNames() where idx wasn't advanced past the length.
allow NULL IVs for CBC mode, same as all zero IV
fix GCC warning
SEP Extensions
1. Added configure option to enable SEP extensions.
2. Enabled KEEP_PEER_CERT for the SEP configuration.
3. Copy the Certificate Policy extension into the cert as the
   device type.
4. Copy an other type Alt Name extension into the cert as the
   hwType and hwSerialNumber, if the alt name has a
   hardwareModuleName OID.