tie the weak DH warning to the very weak security parameter.
Abort printing on error.
certtool: When an external file is used increase out maximum buffer accordingly.
Added gnutls_x509_crl_get_crt_serial2(), a faster variant of gnutls_x509_crl_get_crt_serial().

The new function caches pointers to allow working faster in CRL structures with
lots of entries (e.g., 50000+ entries).
doc update
define NN_HASH unconditionally
renamed gnutls_x509_crl_get_crt_serial2 to gnutls_x509_crl_iter_crt_serial.
Pass the LIBTOOL variable into test scripts

That allows using the detected libtool in scripts.
That corrects an issue on OS X systems that ship a
different libtool. Reported by Daniel E. Macks.
Made gnutls_x509_crl_iter_crt_serial() thread-safe by making the iterator explicit.
Added test for CRL decoding.
corrected the allocation size for CRL iterator.
initialize iterator.
certtool: Added option --stdout-info
certtool: ensure that allocated buffer has a minimum size of 64kb.
certtool: avoid sizeof() on lbuffer
Print errors but avoid being verbose on stderr
When decoding of a DN string fails, treat it as unknown string and print its hex value.
doc update
gnutls-cli-debug: Use proper HTTP request
Added gnutls_record_recv_packet() and gnutls_packet_deinit()

These functions allow for a faster variant of gnutls_record_recv(),
i.e., a variant that eliminates the data memcpy().