Tighten session ticket handling

Tighten client-side session ticket handling during renegotiation:
ensure that the client only accepts a session ticket if the server sends
the extension anew in the ServerHello. Previously, a TLS client would
reuse the old extension state and thus accept a session ticket if one was
announced in the initial ServerHello.

Reviewed-by: Bodo Moeller <bodo@openssl.org>
Use only unsigned arithmetic in constant-time operations

Signed-off-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Emilia Käsper <emilia@openssl.org>
md32_common.h: address compiler warning in HOST_c2l.

Reviewed-by: Stephen Henson <steve@openssl.org>
ec/asm/ecp_nistz256-x86_64.pl: fix inconsistency in path handling.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Fix WIN32 build by disabling bn* calls.

The trial division and probable prime with coprime tests are disabled
on WIN32 builds because they use internal functions not exported from
the WIN32 DLLs.
Reviewed-by: Emilia Käsper <emilia@openssl.org>
armv4cpuid.S: fix compilation error in pre-ARMv7 build.

PR: 3474
Reviewed-by: Kurt Roeckx <kurt@openssl.org>
rc4.c: include md5.h for MD5_DIGEST_LENGTH

rc4.c uses MD5_DIGEST_LENGTH but doesn't include md5.h.  This change
adds the include <openssl/md5.h>.
vms-helper.c: fix default int warning
speed.c, version.c: include comp.h, fix implicit func warning
remove old build system
add include/openssl/opensslconf.h

This is eventually going to have to be generated by configure
add autotools build system
autoheaderize openssl
add options to disable ssl2 and ssl3
add option for enable_comp

this is compression apart from zlib
use new ax_openssl_options m4 macro
use ax_openssl_header to put openssl headers in place
define DATE in configure, not Makefile
add options to disable rc4, rc5

these may depend on md5, so somehow that should work.  If md5 is
disabled, the cyphers that depend on it should also be disabled.
add md2 option