Clarify docs.

Document that the certificate passed to SSL_CTX_add_extra_chain_cert()
should not be freed by the application.

PR#3409
Don't advertise ECC ciphersuits in SSLv2 compatible client hello.

PR#3374
Handle IPv6 addresses in OCSP_parse_url.

PR#2783
Add SHA256 Camellia ciphersuites from RFC5932

PR#2800
Tolerate critical AKID in CRLs.

PR#3014
RT 487.  Mention that generated primes are "at least" B<bits> long.
bn/asm/rsaz-avx2.pl: fix occasional failures.
Fix for EVP_PBE_alg_add().

In EVP_PBE_alg_add don't use the underlying NID for the cipher
as it may have a non-standard key size.

PR#3206
Remove redundant check.

PR#3174
Fix typo in ideatest.c
Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUG

PR#3141
Don't disable state strings with no-ssl2

Some state strings were erronously not compiled when no-ssl2
was set.

PR#3295
Typo.

PR#3107
x86_64 assembly pack: refine clang detection.
Handle BER length encoding.

Tolerate BER length encoding which may include leading zeroes.

PR#2746
Clarify protocols supported.

Update protocols supported and note that SSLv2 is effectively disabled
by default.

PR#3184
Make no-ssl3 no-ssl2 do more sensible things.
Show errors on CSR verification failure.

If CSR verify fails in ca utility print out error messages.
Otherwise some errors give misleading output: for example
if the key size exceeds the library limit.

PR#2875
Typo.

PR#3173
Fix memory leak.

PR#2531