better checking of unsupported constraints.
Allow setting a non-critical name-constraints extension.
Allow appending name constraints.
Do not deinitialize the constraints structure when reading the constraints fails.
Allow multiple flags in gnutls_x509_crt_get_name_constraints()
doc update
Improved DTLS rehandshake test to catch a timeout issue in handshake().
reinitialize the handshake timers when gnutls_handshake() is called.
priority string flag VERIFY_ALLOW_X509_V1_CA_CRT is now a dummy
Added missing file
Verify in example that the sent nonce matches the received nonce.

Reported by Benny Baumann.
properly deinitialize name constraints structure.
When sending a nonce in OCSP check if it is available on the reply.
When verifying a response and a signer isn't provided assume that the signer is the issuer.
fix small leak