OCSP handling - works but needs test
tool util/analyze-ssl.pl to analyze SSL connections
removed util/export_certs.pl - way too old to be useful anymore
update Changes file
util/analyze-ssl.pl - fix version check, show usable SSL_version string
analyze-ssl.pl - check if client or server decides over cipher preference
update Net::SSLeay patch for ocsp (include test, update documentation)
analyze-ssl.pl - changed handling of http_proxy starttls, fixes for soft_error in ocsp_resolver
Force dh initialization in IO::Socket::SSL to not happen at BEGIN time

Fixes RT 95452
current OCSP patch for Net::SSLeay
small OCSP fixes:
- update Net::SSLeay OCSP patch
- accept multiple single responses in stapled OCSP response
analyze-ssl option --dump-chain
analyze-ssl.pl: fix starttls smtp, --CApath
added t/external/ocsp.t
add no ocsp_uri and no certid to soft_errors in ocsp resolver

.
work around/together with OCSP responders, which do not reply to all single requests inside an OCSP request
- OCSP resolver: add caching of soft errors + fix expiring if cache too big
- new tool util/https_ocsp_bulk.pl to check OCSP status of lots of sites
- update OCSP patch for Net::SSLeay (now included in their SVN)
util/https_ocsp_bulk.pl
- log ssl version, cipher and bits in pubkey
- don't stop if hostname does not match, but continue with OCSP - but log as ssl-badname and log CN
- changed output format for better after-analysis
- don't add ocsp tlsext if server mode
- test fix in case no HTTP::Tiny is installed
remove Net::SSLeay OCSP patch and instead refer to Net::SSLeay version 1.59
fix t/io-socket-inet6.t is IO::Socket::INET6 is installed, but too old to use
update Changes
remove util/https_ocsp_bulk.pl (put into p5-scripts repository instead)
release as 1.984
fix skip if fingerprint does not match in t/external/ocsp.t