test/README and test template generator
Add debug-test-64-clang Configure target

Apparently clang 3.1, which ships with FreeBSD 9.1, completely ignores
-fsanitize. Clang 3.3, which ships with FreeBSD 9.2, compiles with it, but
fails to link due to the absence of libasan:

http://lists.freebsd.org/pipermail/freebsd-hackers/2013-December/043995.html
https://www.mail-archive.com/cfe-commits@cs.uiuc.edu/msg92260.html
http://reviews.llvm.org/D2644
Add cscope and ctags files to .gitignore
Environment variables and aliases for unit testing
Remove relative path to testutil.h

Since the test will be built in the test/ directory, the relative path will
break during 'make depend'.
Update heartbeat_test #includes

ssl/ssl_locl.h now comes first to ensure that it will compile standalone.
test/testutil.h is considered to be in the same directory as the test file,
since the test file will be linked into test/ and built there.
Document -trusted_first option in man pages and help.

Add -trusted_first description to help messages and man pages
of tools that deal with certificate verification.
smime man page: add missing options in SYNOPSIS

-CAfile and -CApath is documented in OPTIONS but is missing
in SYNOPSIS, add them there
add description of missing options to verify man page

The options related to policy used for verification, verification
of subject names in certificate and certificate chain handling
were missing in the verify(1) man page. This fixes this issue.
sort the options in verify man page alphabetically

just making sure the options are listed in the alphabetical order
both in SYNOPSIS and DESCRIPTION, no text changes
add references to verify(1) man page for args_verify() options

cms, ocsp, s_client, s_server and smime tools also use args_verify()
for parsing options, that makes them most of the same options
verify tool does. Add those options to man pages and reference
their explanation in the verify man page.
Fix minor typos
Fixed Windows compilation failure
Revert "Fix off-by-one errors in ssl_cipher_get_evp()"

This reverts commit abfb989fe0b749ad61f1aa4cdb0ea4f952fc13e0.

Incorrect attribution
Fix off-by-one errors in ssl_cipher_get_evp()

In the ssl_cipher_get_evp() function, fix off-by-one errors in index validation before accessing arrays.

Bug discovered and fixed by Miod Vallat from the OpenBSD team.

PR#3375
More complete X509_check_host documentation.
Drop hostlen from X509_VERIFY_PARAM_ID.

Just store NUL-terminated strings.  This works better when we add
support for multiple hostnames.
X509_check_mumble() failure is <= 0, not just 0
More complete input validation of X509_check_mumble
Implement sk_deep_copy.