updated gnulib
updated to libopts 5.18.3
pkcs8: initialize parameters on decryption
doc update
gnutls-cli-debug: added AES and CAMELLIA to the list of default ciphers
improve compatibility in pkcs11 key generation

* explicitly set public exponent in template

Signed-off-by: Wolfgang Meyer zu Bergsten <w.bergsten@sirrix.com>
doc update
pkcs12: Allow verification with structures that support other than HMAC-SHA1 MACs.

Conflicts:
	lib/x509/pkcs12_encr.c
tests: updated string to keys tests for new internal API
tests: test the decoding of a PKCS #12 structure with SHA256 MAC

Conflicts:
	tests/pkcs12-decode/pkcs12
doc update
when checking the hostname of a certificate with multiple CNs use the "most specific" CN

In our case we use the last CN present in the DN. Reported
by David Woodhouse.

https://bugzilla.mozilla.org/show_bug.cgi?id=307234#c2
tests: check that gnutls_x509_crt_check_hostname() will correctly use the last CN when multiple
doc update
configure: print error message when nettle is 3.0 or later
use the windows API in windows even if iconv is available
updated minitasn1
record: in DTLS discard only messages that cause unexpected packet errors
doc update
record: tolerate a finished packet with errors in DTLS