Added the PFS priority string.
Allow a null ca file; i.e., allow setting only CRLs in gnutls_x509_trust_list_add_trust_file().
correctly check for message upper limit.
Corrected bugs reported from coverity in opencdk.
several bug fixes due to coverity.
several bug fixes due to coverity.
Corrected dane_verify_crt() to not deinitialize any input state.
removed unneeded include file
added newlines to p11tool error messages