When checking for data to be received use the 'transport_recv_ptr'

This affects cases where there is different send and recv pointers.
Reported and investigated by JMRecio.
doc update
only fail DANE verification if status is non-zero
Accept a certificate using DANE if there is at least one entry that matches the certificate.

This corrects the previous behavior that was rejecting the certificate if there
were multiple entries and one couldn't be validated.
Patch by simon@arlott.org.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>
increased MAX_DATA_ENTRIES to 100.
doc update
More precise packet length checking.

Issue discovered using valgrind and the Codenomicon TLS test suite.
Better check for null signature method.

Issue identified using valgrind and the Codenomicon TLS test suite.
initialize to null the SRP extension data on allocation.

Issue identified using valgrind and the Codenomicon TLS test suite.
doc update
small fixes identified by coverity.
doc update
When generating ECDSA keys, generate 256-bit keys by default.

Curves with less than 256 bits (i.e., SECP192R1 and SECP224R1) are
not widely supported.
doc update
bumped version.
backported signature checks.
gnutls_x509_crt_get_signature: corrected return size
ocsptool: Include path in ocsp request.

This resolves #108582 (https://savannah.gnu.org/support/?108582), reported by Matt McCutchen.
check the return code of getpwuid_r()

Reported by Viktor Dukhovni.
Fix capitalisation of ia5String