Revert "Allow all ciphersuites in SSL3.0 when they are available in TLS1.0"

This reverts commit 9aa5d308e44b35131fde3faf3273d0457d48788c.
corrected parameter returned from stack
doc update
Changed the behaviour in wildcard acceptance in certificates.

Wildcards are only accepted when there are more than two domain components
after the wildcard. This will prevent accepting certificates from CAs
that issued '*.com', or 'www.*'.
doc update
clang warning fixes
do not consider wildcards in non-ascii names.
doc update
Check explicitly for the errors gnutls_record_uncork() should recover from.
backported fixes for gnutls_record_cork() and DTLS.
doc update
When verifying check for the same certificate in the trusted list, not only the issuer

When the certificate list verifying ends in a non self-signed certificate,
and the self-signed isn't in our trusted list, make sure that we search
for the non-self-signed in our list as well. This affects,
gnutls_x509_trust_list_verify_crt() and makes its results identical to
gnutls_x509_crt_list_verify().
changed the behavior in certtool's PKCS #8 key export with no password

By default when no password is specified, an unencrypted key is output.
The previous behavior of encrypting using an empty password can be
replicated using --empty-password.
doc update
When the --provider option is given, initialize PKCS #11 prior to calling gnutls_global_init().

This ensures that the PKCS #11 subsystem will not be initialized twice.
doc update
doc update
bumped version
released 3.1.23
correctly check for message upper limit.