updated news entry
opencdk: changed filter_fnct_t to match the actual function prototypes
Added GNUTLS_TL_GET_COPY flag and documented the limitations of gnutls_x509_trust_list_get_issuer()
tests: added check for GNUTLS_TL_GET_COPY
report the FIPS140-2 mode
tests: added -r option to dtls-stress

That allows it to replay messages in a kind of arbitrary way.
use wait and retransmit when receiving session tickets
the handshake function has a timeout value by default
avoid calls in gnutls_init()
doc update
corrected compilation for non-pkcs11; reported by David Woodhouse.
doc update: clarifications in gnutls_x509_trust_list_add_trust_file
pkcs11: when checking for presence do not give up on the first mismatch
tests: check gnutls_pkcs11_crt_is_known() when multiple same DNs are present
address memory leak in gnutls_pkcs11_crt_is_known()
corrected remove_pkcs11_url()
tests: corrected check with gnutls_x509_trust_list_get_issuer
added FIPS140-2 DH verification functions
removed unused definition
added FIPS140-2 ECDH verification functions