Corrected ex_data handling in the cert store context (apparently, the per-op context cannot be initialized usefully so just using the cert store context), and fixed unit tests to check that unknown cert callback is really given what it should be (and that override-accept does work).
OpenSSL-only DTLS iteration. Now with entirely refactored logic (avoid use of DTLSv1_listen, use only two sockets, strictly under our own control). At least unit tests work. Smirk.