sasl_sspi: Fixed missing free of challenge buffer on SPN failure
sasl_sspi: Fixed hard coded buffer for response generation

Given the SSPI package info query indicates a token size of 4096 bytes,
updated to use a dynamic buffer for the response message generation
rather than a fixed buffer of 1024 bytes.
RELEASE-NOTES: Synced with cd6ecf6a89
tool_hugehelp.c.cvs: Added copyright

Added copyright due to warning from checksrc.pl.
config-symbian.h: Fixed up line lengths > 79 characters
config-tpf.h: Fixed up line lengths > 79 characters
Curl_poll + Curl_wait_ms: fix timeout return value

Curl_poll and Curl_wait_ms require the fix applied to Curl_socket_check
in commits b61e8b8 and c771968:

When poll or select are interrupted and coincides with the timeout
elapsing, the functions return -1 indicating an error instead of 0 for
the timeout.
docs/SSLCERTS: update the section about NSS database

Bug: http://curl.haxx.se/mail/lib-2014-07/0335.html
Reported-by: David Shaw
create_conn: prune dead connections

Bringing back the old functionality that was mistakenly removed when the
connection cache was remade. When creating a new connection, all the
existing ones are checked and those that are known to be dead get
disconnected for real and removed from the connection cache. It helps
the cache from holding on to very many stale connections and aids in
keeping down the number of system sockets in wait states.

Help-by: Jonatan Vela <jonatan.vela@ergon.ch>

Bug: http://curl.haxx.se/mail/lib-2014-06/0189.html
openssl: fix version report for the 0.9.8 branch

Fixed libcurl to correctly output the newer versions of OpenSSL 0.9.8,
starting from openssl-0.9.8za.
mk-ca-bundle.pl: switched to using hg.mozilla.org

... as mxr.mozilla.org is due to be retired.

The new host doesn't support If-Modified-Since nor ETags, meaning that
the script will now defer to download and do a post-transfer checksum
check to see if a new output is to be generated. The new output format
will hold the SHA1 checksum of the source file for that purpose.

We call this version 1.22

Reported-by: Ed Morley
Bug: http://curl.haxx.se/bug/view.cgi?id=1409
mk-ca-bundle.pl: add missing $
sspi: Moved KERB_WRAP_NO_ENCRYPT from socks_sspi module

In preparation for the upcoming SSPI implementation of GSSAPI
authentication, moved the definition of KERB_WRAP_NO_ENCRYPT from
socks_sspi.c to curl_sspi.h allowing it to be shared amongst other
SSPI based code.
urldata: Introduced a GSSAPI (Kerberos V5) data structure

Added a kerberos5data structure which is similar in nature to the
ntlmdata and negotiatedata structures.
sasl_sspi: Added GSSAPI message functions
urldata.h: Fixed compilation warnings from commit 3ec253532e

warning: extra tokens at end of #endif directive
curl_sasl.h: Fixed compilation error from commit 4b491c675f

warning: 'struct kerberos5data' declared inside parameter list

Due to missing forward declaration.
SHA-1: 61c93383b7f6cf79d12ff99e9dced1d1cc2a7064

* curl_sasl_sspi.c: Fixed compilation warning from commit 4b491c675f

warning: declaration of 'result' shadows a previous local
curl_sasl_sspi.c: Fixed more compilation warnings from commit 4b491c675f

warning: unused variable 'resp'

warning: no previous prototype for 'Curl_sasl_gssapi_cleanup'
email: Introduced the GSSAPI states