Have list of acceptable hash-signature-pairs in context.
Fixes for Nettle < 2.1 and Nettle < 2.8
Added a few more limits (from man getrlimit on linux)

Also rewrote the limit handling to have the limits in an array.
This is somewhat slower, actually, since it is at least currently
using strcmp, but it is probbaly not much of an issue.

This rewrite also allows code reusage from signal_handler.c, so
that we support the same set of limits in both functions.
Some code-size tweaks without changing the code.

o First, use -Os instead of -Ofast or whatever for this file.
o Secondly: Try to convince gcc unrolling the loops is not a good idea
  by adding UNLIKELY() to the checks for errno:s.

There was only a 10% or so gain in code size, but it is still at least measurable.
Save about 10Kb of code size by doing smarter inlining.
Let's actually kill non-fixme fixmes.
Changed a few push_constant_text to push_text

push_constant_text generates a lot of code, and the speed difference
is basically zero in this case. In fact, a benchmark loop doing
_sprintf(O) on a stat-object is fairly consistently 1% faster now.

This about halves the size of _stat_index.
Removed another 50% of the size by rewriting some more code.

This is actually faster than the old code.
Also added support for (mapping)stat, mainly for debugging convenience.

On a somewhat related topic values(stat) could be optimized rather significantly if so desired.
SSL.State: Allow for AEAD suites with implicit iv/nonce.

The ChaCha20-Poly1305 suites use a fully implicit nonce, so make sure
to support this.

Fixes ChaCha20-Poly1305 TLS interoperability with Google's GFE/2.0.
SSL.https: Improved host header in client mode.

This fixes issues using the client to access real https servers.
Compile fix. Breaks in actual test though.
Don't use dsa-sha512 is there is no PKCS id for it.
Write out bitstrings as strings if they are even bytes long.
Don't limit read_bytes/read_file ot 2GB/2 billion lines (here, we do it in file.c instead...).