No SNI in Pike 7.8.
Since Session doesn't know about Context, do the CertificatePairs lookup in the caller to avoid ugly type casts.
certificate_request probably works. Did some work on sending client certificates.
Alerts messages are printed out when SSL3_DEBUG is enabled. Cut down the redundancy.
Whitespace and debug fixes.
Comments and fixmes.
Create a new struct object before cutting substrings, to prevent reading outside of the limit.
Allow time to be set through ASN.1 UTC constructor
Backend: Fixed EXIT in CallOut.

EXIT in CallOut sometimes attempts to get the parent object (ie the backend)
by calling parent_storage(), but that requires destruct() to have registered
the program with a destroy_called_mark, which it only does for programs
lacking lfun::destroy() if they are

  * C-programs (no problem here).

and

  * Have the PROGRAM_NEEDS_PARENT flag set (this was missing).

This caused the error "Cannot access parent of destructed object.".

This bug could sometimes be triggered by the async_tls_close_test.