Do not call the user_hello_func multiple times when performing ticket resumption.
doc update
When decoding of a DN string fails, treat it as unknown string and print its hex value.
doc update
x509cert-tl: backported check from master
pkcs11: avoid callig _gnutls_bin2hex() when length is zero.
p11tool: Do not allow a newline as PIN.
gnutls_pkcs11_privkey_generate2(): corrected public key extraction (for ECDSA keys)
p11tool: don't outsmart user and override login type

Unfortunately tokens vary on their requirements for writing trusted
and private objects, and there is no one-size fits all policy. Thus
allow a proper failure and warn the user that so-login may be required.
Added so-login flag to force security office login to the card
doc update
updated auto-generated files