Correct a test for X509_get_notAfter() failing or returning
an unsupported time type when passing data to keynote.

Problem introduced by angelos in 1.41 though the code
has been reformatted a few times since then.

ok otto@ miod@
move pointer use to after a NULL pointer check
ok dlg@
No longer mention the tools/ directory, which content is irrelevant those days;
forgotten during previous cleanups.
Remove fips_md_init() macro indirection for digest algorithms, used by the
OpenSSL FIPS module to prevent forbidden digests to be allowed.
No functional change but readability.

ok deraadt@
Add Brainpool elliptic curves. From OpenSSL RT#2239 via ${DAYJOB}.
Be sure to rerun `make includes' after updating.
ok tedu@ beck@ deraadt@
Add support for the french ANSSI FRP256v1 elliptic curve.

While not to be considered a good choice of elliptic curve (refer to
http://safecurves.cr.yp.to/ for more details), it is nevertheless deemed a
good decision to allow developers with requirements to use such a curve,
to be able to do this via a crypto library allowing for much better choices
to be made, without having to change (much of) their code to get better crypto.

ok beck@ deraadt@
- add 'sunxi' to list of miniroot files
- add list of supported 'sunxi' and 'imx' hardware

ok bmercer@
Add ChaCha to libcrypto, based on djb's public domain implementation.

ok deraadt@
fixup SoC name, as it's am335x, not am334x.

ok bmercer@
x86-64 ABI requires arrays greater than 16 bytes to be aligned to
16byte boundary.  However, GCC 16-byte aligns arrays of >=16 BITS,
not BYTES.

This diff improves bug detectability for code which has local arrays
of [16 .. 127] bits:  in those cases SSP will now detect even 1-byte
overflows.

OK kettenis@.  Tested in snaps for a week.
sync
Revert 1.49 (bad merge with free dejavu)
Fix perl arch directory name.
Move RSA keys from "lka" to a new dedicated "ca" process because lka
is handling some async requests and shouldn't be busy with sync RSA.

ok gilles@
Provide an EVP implementation for ChaCha.

ok miod@
Nuke unused evptests.txt - the real one is over in regress.

ok miod@
Extend fread() and fwrite() to check for integer overflow, in which case
errno EOVERFLOW is returned and error is set on the FILE.
ok kettenis miod beck
KNF.
Update with recently added objects.

ok miod@
+ e_chacha.c, and bump minor