Pass CFLAGS (which contains -DOPENSSL_IA32_SSE2) to the perlasm
build on i386.  This enables SSE2 optimizations for bignum multiplications,
Montgomery multiplications and sha512.
This speeds up Diffie-Hellman operations in isakmpd and iked quite
a bit.  OK djm@, markus@, mikeb@
No need to set CFLAGS+=-DOPENSSL_IA32_SSE2 on amd64. Nothing uses it.
Small test by marco@ and md5 /usr/lib/libcrypto.so.19.0 agrees.
- Replace digicert 2nd-level cert with the root which issued it.
Allows https checkouts from github to work.

- Add digicert's other root certs.

Fingerprints carefully checked against those in the built-in roots
supplied with Mozilla.

ok dcoppa@ jcs@
Add support for hppa64 based on the defaults for 64-bit HP-UX as found in the
Configure script.

ok deraadt@
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
import OpenSSL 1.0.0e
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
import OpenSSL 1.0.0e
openssl-1.0.0e: resolve conflicts
crank major for openssl-1.0.0e
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
OpenSSL 1.0.0f: import upstream source
This commit was generated by cvs2git to track changes on a CVS vendor
branch.
OpenSSL 1.0.0f: import upstream source
OpenSSL 1.0.0f: merge
OpenSSL 1.0.0f: crank minor
cherrypick fix for CVE-2012-2110: libcrypto ASN.1 parsing heap overflow
ok miod@ deraadt@
Disable SSLv2 in OpenSSL.  No objections from djm.
Brad, jasper and naddy helped with test builds, fixing ports, etc.
Skip printing another SSLv2-only command in s_client's usage text.
jmc@ noticed this in the manpage while updating it, but it applies here too.
remove leftover NOLINT, WANTLINT, LINTFLAGS, LOBJ vars and lint targets.

ok guenther@