recognise X9.42 DH certificates on servers
Makefile.org: clear yet another environment variable.
PR: 2793
update FAQ
Check for potentially exploitable overflows in asn1_d2i_read_bio
BUF_mem_grow and BUF_mem_grow_clean. Refuse attempts to shrink buffer
in CRYPTO_realloc_clean.

Thanks to Tavis Ormandy, Google Security Team, for discovering this
issue and to Adam Langley <agl@chromium.org> for fixing it. (CVE-2012-2110)
e_rc4_hmac_md5.c: last commit was inappropriate for non-x86[_64] platforms.
PR: 2792
PR: 2239
Submitted by: Dominik Oepen <oepen@informatik.hu-berlin.de>

Add Brainpool curves from RFC5639.

Original patch by Annie Yousar <a.yousar@informatik.hu-berlin.de>
correct old FAQ answers
check correctness of errors before updating them so we don't get bogus errors added
correct error code
objxref.pl: improve portability.
update NEWS
oops, not yet ;-)
Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr>
Reviewed by: steve
Improved localisation of TLS extension handling and code tidy.
s23_clnt.c: ensure interoperability by maitaining client "version capability"
vector contiguous.
PR: 2802
Change value of SSL_OP_NO_TLSv1_1 to avoid clash with SSL_OP_ALL and
OpenSSL 1.0.0. Add CHANGES entry noting the consequences.
CHANGES: fix typos and clarify.
CHANGES: clarify.
update FAQ
update NEWS
Don't try to use unvalidated composite ciphers in FIPS mode