ssl_sock_init() does nothing, so remove it...
TLS is pretty boring without TLS extensions... unifdef OPENSSL_NO_TLSEXT,
which was already done for libssl some time back.
Document the -servername option for openssl(1) s_client.

Based on a diff from Rusty (rustyl at outband dot net) and OpenSSL.
missing outlen in tls_write decl
More OPENSSL_NO_TLSEXT clean up.
Clean up more SSLv2 remnants.
Allow digest routines to provide their own HASH_FINAL routine; will be
necessary for upcoming GOST code.

From Dmitry Eremin-Solenikov
Introduce EVP_MD_CTX_ctrl(), to allow for fine control of a given digest.
This functionality was already available (and optional), and used in the
bowels of the ASN.1 code. This exposes it as a public interface, which will
be used by the upcoming GOST code.
Crank libcrypto minor version.

From Dmitry Eremin-Solenikov.
GOST crypto algorithms (well, most of them), ported from the removed GOST
engine to regular EVP citizens, contributed by Dmitry Eremin-Solenikov;
libcrypto bits only for now.

This is a verbatim import of Dmitry's work, and does not compile in this
state; the forthcoming commits will address these issues.

None of the GOST code is enabled in libcrypto yet, for it still gets
compiled with OPENSSL_NO_GOST defined. However, the public header gost.h
will be installed.
Replace RAND_bytes() usage with arc4random_buf().
Rename internal yet public key_{un,}wrap_crypto_pro symbols by prepending a
`gost_' prefix to them, so that we do not pollute the global namespace too
much.
Remove DEBUG_SIGN code. Make sure gost_key_unwrap_crypto_pro() returns failure
instead of a printf and a success return, when the operation fails.
GOST tests, not connected to the build yet.