Fix incorrect bounds check in amd64 assembly version of bn_mul_mont();
noticed and fix by Fedor Indutny of Joyent
( https://github.com/joyent/node/issues/7704 )
Remove OPENSSL_instrument_halt and OPENSSL_far_spin, which both might
have been used under DJGPP in the previous century (if at all).
wrap getenv OPENSSL_ALLOW_PROXY_CERTS in an issetugid check, to protect
setuid applications from being fooled.
ok miod
Remove the OPENSSL_*cap getenv's.  A program should not be able to
change the behaviour of the library in such a complicated fashion.
ok miod
Fix memory leak in error path.

OK from miod@
KNF
KNF
More KNF.
More KNF.
More KNF and clean up.
Pull out the sequence number selection and handle this up front. Also, the
correct record is already known, so avoid reassignment.
Switch to the ISC licensed versions of these files, which Google has made
available via boringssl.

ok deraadt@
Specify the correct strength bits for 3DES cipher suites.

From OpenSSL.

ok miod@
Pull the code that builds a DTLS sequence number out into its own function
to avoid duplication. Also use fewer magic numbers.

ok miod@
always compare memcmp against 0, for clarity.
More KNF.
KNF.
KNF.
KNF.
More KNF.