doc: Corrections for gnutls_handshake_set_hook_function()
pkcs11: avoid callig _gnutls_bin2hex() when length is zero.
p11tool: Do not allow a newline as PIN.
initialize str to NULL
Use inet_ntop() for printing IP addresses.

The old dumb code is used in systems that don't have that function.
doc update
gnutls_x509_crt_check_hostname() checks text ip addresses as well.

That aligns the documentation with the implementation.
tests: Added test cases for IPv4/6 matching.
doc update
Added explicit documentation on IPv4 and IPv6 address matching.
mention that IPv4 and IPv6 address comparison is since 3.2.16.
p11tool/certtool: use GNUTLS_SO_PIN for reading security officer's PIN
gnutls_pkcs11_privkey_generate2(): corrected public key extraction (for ECDSA keys)
doc update
pkcs11: Removed length check of attribute as a sanity check for valid keys.

There can be keys where the id or label is empty and thus with zero length.
p11tool: don't outsmart user and override login type

Unfortunately tokens vary on their requirements for writing trusted
and private objects, and there is no one-size fits all policy. Thus
allow a proper failure and warn the user that so-login may be required.
doc update
dane: Added sanity check in dane_verify_crt_raw()

That allows calling the function will an empty chain.
Reported by Simon Arlott.
dane: Skip DANE entries that may contain unknown info

That would allow skipping any future entries without failing.
Reported by Simon Arlott.
set CKA_EC_PARAMS when generating an ECDSA key

Conflicts:
	lib/pkcs11.c